Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

not able to ping

hi friends,

i configured site to site vpn between two sites ,one side having cisco 2811 and the other side juniper firewall.but the tunnel is up ,but i am not able to ping the remote lan

and my sh crypto isakmp sa showing

state-QM_IDLE and active

but not able to ping

help me out

1 REPLY
Community Member

Re: not able to ping

You should payed attention from which IP your are sending the ICMP echo request.

The source IP address of your testing packets should be in the participating networks of the IKE phase2.

For exemple :

On your 2811 use the following command

ping destination_ip_add source 2811_lan_ip_add

or

ping destination_ip_add source lan_interface_name

on your Juniper (if screenOS) use :

ping destination_ip_add from lan_interface_name

230
Views
0
Helpful
1
Replies
CreatePlease to create content