Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VPN3002 - VPN 3015 Problems Connecting via "Network Extension Mode"

Using DSL, when I connect the VPN3002 via "Client Mode" everything works great, can connect to internal devices.

When I switch the VPN3002 to "Network Extension Mode" I can ping the external & internal addresses of the 3015 but cannot access any devices internally.

Is this a routing problem on the 3002 or the 3015 ??

  • Other Security Subjects
4 REPLIES

Re: VPN3002 - VPN 3015 Problems Connecting via "Network Extensio

When you go into NEM are you putting the 3002's private IP addresses on a different subnet than the central location?

New Member

Re: VPN3002 - VPN 3015 Problems Connecting via "Network Extensio

No, the 3015 internal is using 172.16.x.x subnet 255.255.0.0.

The 3002 private is using 172.99.x.x subnet 255.255.0.0

Re: VPN3002 - VPN 3015 Problems Connecting via "Network Extensio

OK...Just asing some basic questions here. Do you have a router with route staements telling the remote packets how to get back to the remote site once they reach the central site?

New Member

Re: VPN3002 - VPN 3015 Problems Connecting via "Network Extensio

I set my 3015 to use the "reverse Route Injestion" on the 3015. On the routing table of the 3015 I see that the route for the 3002 is pointing to the public IP address of the 3015 as the next hop. Should the next hop be the internal IP address of the 3015 ?

HELP!!

109
Views
0
Helpful
4
Replies