IPsec VPN "site to site" USG20<-> USG40
All Replies
-
IMVHO you should ask to your iSeries sysadmin.As an example, you can try this with a windows computer or a network device with management.
If 192.168.8.249 is not used, configure it as address for a test PC or network device, but without any gateway. You will be able to ping it from the subnet, but from the VPN it will be completely missing. It will receive packages, but without a gateway and/or the correct routing table, it won't be able to address answers of ICMP packages.Unless something peculiar has been done with VPN connection, policy routes, firewall rules (for instance, 192.168.8.2 forbade to connect to anything into security policies)... the answer for the mistery is inside your iSeries device.0 -
Hi, Solved!
there was a problem inside tcp configuration in As400.
thanks to everyone and especially to mMontana for last tip.0
Categories
- All Categories
- 187 Beta Program
- 1.7K Nebula
- 91 Nebula Ideas
- 63 Nebula Status and Incidents
- 4.7K Security
- 236 Security Ideas
- 1.1K Switch
- 51 Switch Ideas
- 917 WirelessLAN
- 27 WLAN Ideas
- 5.4K Consumer Product
- 173 Service & License
- 296 News and Release
- 65 Security Advisories
- 14 Education Center
- 1K FAQ
- 452 Nebula FAQ
- 256 Security FAQ
- 100 Switch FAQ
- 115 WirelessLAN FAQ
- 22 Consumer Product FAQ
- 67 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 69 About Community
- 52 Security Highlight