Thank you for your respose. This is as I had suspected but was not working for me and with those exact settings it still is not working. I am unable to ping the other routers wan address from the either device.

If I enter the router itself as a default gateway it seems to work, I can atleast ping the other device and I am able to get the VPN Tunnel to connect but I am unable to ping any lan addresses just the wan.

I am new to this and there may be some other settings I need to configure. Thanks again for your assistance.

Joe,

Make sure that Block WAN Request is disabled on the Firewall tab. If it is enabled you will not be able to ping the WAN port. I was in the exact same position as you with setting the gateway as the same as the router. I could connect the tunnel, but could not ping or access any LAN devices through it. After I disabled Block WAN Request and changed the gateway to be the opposite router IP address it worked perfectly. Keep us updated.

I agree with Ivan, it seems as if the subnet mask would not allow this to work.  I have done this before with addresses like 192.168.1.1 and gateway of 192.168.1.2 and the other router set to 192.168.1.2 with gateway of 192.168.1.1.  Once you do that it should have connectivity between the two with both devices looking back at each other. I have done this successfully on my end with similar configurations.

Thanks for the help! It was the subet mask needing to be 255.255.0.0 and everything worked.

Now I have to deal with multiple subnet access over VPN. I guess the solution is to use multiple tunnels for different subnets but since I can't create a tunnel to a previuosly used endpoint I dont know if this configuration will work. I can get 192.168.1.0 (site a) to talk to 192.168.2.0 (site B) through tunnel1 and 192.168.3.0 (site A) to 192.168.4.0 (site B) over tunnel2. Traffic flows fine within the tunnels but if I want to access 192.168.1.0 from 192.168.4.0 it will not work. Seems to be a limitation with these routers. Hopefully more searching today will find a solution.

Thanks again!

Joe

It is possible to connect through one VPN tunnel all network from SiteA to all network from SiteB by tweaking Local Group setup and emtoe Group Setup fields in gateway-to-gateway tunnel properties. All you need to do is to expand subnet mask beyond normal range to make it include all local (for Local group) or remote (for Remote group) subnets.

Like here:

SiteA:

192.168.0.0/24

192.168.1.0/24

SiteB:

192.168.2.0/24

192.168.3.0/24

On SiteA router local group setup should contain 192.168.0.0 with subnet mask 255.255.254.0, remote group should be 192.168.2.0 with subnet mask 255.255.254.0

and vice versa:

On SiteB router local group setup should contain 192.168.2.0 with subnet mask  255.255.254.0, remote group should be 192.168.0.0 with subnet  mask 255.255.254.0

This solution requres careful subnet planning, but as I know it is possible. However if you wish first subnet from SiteA to be able to access only first subnet on SiteB (like 192.168.0.0/24 to access 192.168.2.0/24 only) I'm not sure it is possible. May be you need to try to restrict access by applying firewall access rules on both routers, but I'm not sure if VPN traffic can be regulated by such rules. It's pretty advanced configuration for this device

Ivan thanks for the explanation!!!

I was able to get this to work just as you suggested but only using the exact networks and subnet described in your post. Which is okay I can use 192.168.0.x - 3.x with 255.255.254.0 for my network as this is a new configuration. I know it gets tricky when working with subnetting but I wanted to get it to work with the networks specified in my original post... 192.168.1.0 - 192.168.4.0.  As you stated this will require some planning as I would need to create the tunnel with specific IPs which can be used withtin the specified subnet.

This forum has been great and answered both my questions very quickly and correctly. I wish i found this sooner by searching the posts but everything I found said "multiple tunnels". Everythign is now working perfectly through one tunnel using the appropriate ip's and subnets.

Thanks Again!

Joe