Site to Site VPN - can ping remote but data not transmitting
We have a site to site vpn with a business partner. The VPN tunnel is up and we can ping both ways. Also we can telnet to the remote side for testing purposes. The issue is that our server can't send data to the remote server. We are sending ACSII and MLLP (Minimal Lower Level Protocol formatting) type HL7 data. Any help would be greatly appreciated.
Re: Site to Site VPN - can ping remote but data not transmitting
It may be an issue with MTU as suggested by Didya. And you would do well to explore ways to work around that. But there is another possibility to consider. I just recently had an experience at a customer site where they were having problems with data not passing through a VPN connection. We figured out that the access list on one side was not a matching version of the access list on the other side (looked like they would have same effect but did not match). When we re-wrote the access list to be an exact match then data started to flow through the VPN. I would suggest that you do a review of the access lists for VPN on both sides and verify that they are an exact match for each other.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...