cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
647
Views
2
Helpful
2
Replies

IPsec Tunnel Private-to-Private network just goes one way

istvanhoka
Level 1
Level 1

Hi there!

First time Cisco setup for me, trying to setup a VPN between headquarters (peer 100.1.1.1, internal network 192.168.2.*) and a branch office (peer 200.1.1.1, internal network 192.168.1.*).

I followed this guide (minus the static NAT): http://cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094634.shtml.

What works:

- pings work either way;

- http works either way;

- windows file sharing works either way;

What does not work:

- remote desktop works going from headquarters to branch office but not viceversa;

- ftp works only from headquarters to branch office but not viceversa.

Router configuration for both offices is attached. Any help is greatly appreciated. IPs are changed for security.

2 Replies 2

Jon Marshall
Hall of Fame
Hall of Fame

This sounds like an MTU issue. Please see the attached doc which discusses the issue and has workarounds.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008081e621.shtml

Jon

After reading the suggested doc about fragmentation, I adjusted the both the MTU and TCP MSS to 1300. There was no change in the behaviour.

I am attaching the updated configurations.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: