03-30-2007 11:21 AM - edited 02-21-2020 02:57 PM
I have a IPsec VPN tunnel up, but cannot send traffic across a VPN. The remote site can send traffic to the VPN router. One of the requirements is that all devices must have same public IP. So that is why the Linksys VPN router's Lan address is the 55.x.x.120.
Is it because we are using the public IP on the Linksys lan that it won't send traffic through the VPN?
Or is it because the Cisco VPN server is configured only to allow the one host (the linksys router)?
If I have a computer on the linksys lan at 55.x.x.121 i have no access to the VPN tunnel.
The linksys also has a ping utility. I can ping the remote gateway, but not the remote host 160.x.x.160. This makes me think the router is just going out the WAN to the internet and not using the VPN?
Any insight would be appreciated. Normally i'd be joining two private networks over a VPN tunnel, but Im wondering if it will work with the given restrictions.
IPSEC VPN SETUP:
Edge router:
NATs 192.168.1.100 55.x.x.120
access-list UDP 500, 4500 and IP Protocol 50 on 192.168.1.100
Linksys VPN router:
WAN 192.168.1.100 255.255.255.0
LAN 55.x.x.120/24 IP address
VPN SETUP:
local subnet: 55.x.x.120/32
remote subnet: 160.x.x.160/32
remote gateway: 160.x.x.150/32
On the remote ASA5520 they have:
local subnet: 160.x.x.160/32
remote subnet: 55.x.x.120/32
remote gateway: 55.x.x.120/32
03-31-2007 03:30 AM
If you use /32 subnet mask for Local and remote subnet, only a single ip address would be part of the tunnel.
Change it to a network, so that it can include more ip addresses.
That should let you ping the host connected to the routers.
-Kanishka
03-31-2007 11:30 AM
Im sure you're right. We tested as a host to network VPN and it worked. For some reason it had to change to a host to host.
Thanks.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: