How to let 2 clients (connected to VPNc) communicatie to eachother

[gaston.bougie]

We have a 'good' working vpn connection for the company for several time.

But when you have to use direct communication from one connected client to another, it doesn't work.

Is there a simple manner to get this working?

[spremkumar · Accepted solution]

Hi Gaston

Can you tell me about the security device which you are using over there as your VPN Server ?

regds

[gaston.bougie]

Hi Spremkumar,

thank you for asking.

The cisco devices we use for vpn are:

VPN3000 concentrators

The clients connected to the vpn concentrator can perfectly connect to our internal network.

But the clients can't communicate to each other for direct connections.

I'm not sure what to configure in the VPN concentrator to get this working.

[J.altami01]

Hi Gaston there is something called Reverse Route Injection (RRI)and is used for comunciate sites or host VPN clients, here is the link in Cisco Web Site

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2284/products_configuration_example09186a0080094a6b.shtml

I hope it helps

Please rate if is posible

[gaston.bougie]

Hi J.altami01,

thank you for your reaction.

I saw also this RRI called:

"Client reverse route injection"

But when I enable this, it doesn't make any difference.

[gaston.bougie]

I'm going to ask Cisco for Help, when I know the sollution I will post it. Any help from the forum is helpfull.

Regards,

Gaston Bougie

[gaston.bougie]

The sollution for me was a wrong IP address in the tunnel-default-gateway.

I've removed this with entering 0.0.0.0 and it works now.

Also I've found out that the tunnel default gateway can not be the same as a interface address of the concentrator. I had one interface disabled with IP address 0.0.0.0. This disabled interface prevented me from entering 0.0.0.0 as tunnel-default-gateway.

So I had to put an fictive IP address first on that disabled interface.