Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

vpn tunnel is up, destination host unreachable

Unanswered Question
Sep 10th, 2007
User Badges:

We're (us & our consultants)able to see others end of the tunnel but they (consultants) are not able to reach the hosts they're after. What could have gone wrong as it use to work before. We've never done any changes to the firewall settings? What kind of a problem is this and how do I resolve it if it's firewall related? Note that the hosts the clients are trying to reach up and PINGable.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
bericaleb Mon, 09/10/2007 - 02:55
User Badges:

Please help. My query is posted above. The VPN tunnel is up. I can see my peer. But the hit counts to my internal hosts are on 0. My consultants can't access these hosts. Where do you think the problem will be? Is it on the firewall, routing or the hosts themselves? Please help!

rtrunk Mon, 09/10/2007 - 05:59
User Badges:

It's hard to diagnose without some configs, but I DO NOT recommend posting your configs here.

My suggestion is to turn on logging on the client and your firewall (PIX, ASA or ?). You might get a clue if the firewall is dropping packets. Otherwise, I would suspect a routing problem.

Here are my questions:

Are you using split-tunneling? Do the hosts have a route back to the VPN users? Are there some ACLs on the inside interface of the firewall? Do you see the client traffic on the next hop router after the firewall?


acomiskey Mon, 09/10/2007 - 06:28
User Badges:
  • Green, 3000 points or more

You can post your configs, just remove passwords, public ip's etc.


This Discussion