Site to site IPSec VPN: VLAN5 <-> LAN2 interface
I’m trying to set up a tunnel between a VLAN on 1 site and a regular LAN interface on the other site. The tunnel seems to work fine, but I cannot make any connection to the devices.
I have tried site to site and vti, both seem to connect, but cannot ping. Tunnel interface between 2 LAN interfaces is no problem, but I need VLAN <-> LAN2.
VPN_TEL_LOCAL Left: Subnet: 192.168.5.0
VPN_TEL_REMOTE Left: Subnet: 192.168.10.0
VPN_TEL_LOCAL Right: Subnet: 192.168.10.0
VPN_TEL_REMOTE Right: Subnet 192.168.5.0
Still no response on both sides. Any help?
All Replies
-
You want site to site with at least one end nailed-up the status will show the tunnel is up
0 -
If you have setup the Local and remote policy right with a zone for the site to site then you might need a routing rule.
Incoming Interface
member LAN/ge
destination the remote subnet
next hop
type VPN Tunnel
tunnel your zone for the site to site
Then a firewall for LAN to zone site to site
0 -
What's about your Security Policy ? Have you allowed the traffic ?
Also,Please check there is no "Source Network Address Translation" applied.0
Guru Member
Ally Member
Categories
- 8K All Categories
- 1.6K Nebula
- 60 Nebula Ideas
- 54 Nebula Status and Incidents
- 4.4K Security
- 222 Security Ideas
- 963 Switch
- 45 Switch Ideas
- 865 WirelessLAN
- 20 WLAN Ideas
- 5.2K Consumer Product
- 138 Service & License
- 268 News and Release
- 53 Security Advisories
- 12 Education Center
- 573 FAQ
- 273 Nebula FAQ
- 132 Security FAQ
- 73 Switch FAQ
- 72 WirelessLAN FAQ
- 7 Consumer Product FAQ
- Documents
- 34 Nebula Monthly Express
- 71 About Community
- 44 Security Highlight
