VPN3002 - VPN 3015 Problems Connecting via "Network Extension Mode"

[smartin]

Using DSL, when I connect the VPN3002 via "Client Mode" everything works great, can connect to internal devices.

When I switch the VPN3002 to "Network Extension Mode" I can ping the external & internal addresses of the 3015 but cannot access any devices internally.

Is this a routing problem on the 3002 or the 3015 ??

[travis-dennis_2]

When you go into NEM are you putting the 3002's private IP addresses on a different subnet than the central location?

[smartin]

No, the 3015 internal is using 172.16.x.x subnet 255.255.0.0.

The 3002 private is using 172.99.x.x subnet 255.255.0.0

[travis-dennis_2]

OK...Just asing some basic questions here. Do you have a router with route staements telling the remote packets how to get back to the remote site once they reach the central site?

[smartin]

I set my 3015 to use the "reverse Route Injestion" on the 3015. On the routing table of the 3015 I see that the route for the 3002 is pointing to the public IP address of the 3015 as the next hop. Should the next hop be the internal IP address of the 3015 ?

HELP!!