Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 4471 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPsec Tunnel Routing Problem

garpace

Hi.

I am having an issue connecting (even pinging) remote hosts on the other side of a site-to-site IPsec VPN tunnel.  I can't seem to troubleshoot it, even though everything was working fine a month ago.

Here's the setup:  <192.168.1.0/24> - <UTM A> ===tunnel===<UTM B>-<192.168.30.0/24>

Both Sophos UTMs are completely up to date.  Using pre-shared key.  UTM A is imitating.  The tunnel looks fine (establishes fine, says its up under/green site-to-site), and I can access the webadmin for both UTM A and B from 192.168.1.0 (so some stuff is going through the tunnel just fine).

I can ping 192.168.30.1 (the UTM) from 192.168.1.0/24, but any other host is "destination unreachable".  Tracert to 192.168.30.1 is fine, but tracert to 192.168.30.14 fails (and I know the host is up).

I thought the IPsec settings took care of all the routing, so I don't have any static routes or masquerading or NAT set up...it should just work, no?  It did previously!

Anyone know how to troubleshoot?  How would I check the routing tables in UTM B?  Why are packets getting lost on their from, say, 192.168.1.10 to 192.168.30.14?

 

 

 



This thread was automatically locked due to age.
Parents
  • 0

    Additional info that I think my be helpful:

    1) I checked the Rulz - think I am good.  Tried turning off IPS just in case, didn't seem to do anything.

    2) I had "create automatic firewall rules" checked on both sides, and confirmed in webadmin that "any" rules should allow traffic for anything through the tunnel.

    3) Any other ideas?

Reply
  • 0

    Additional info that I think my be helpful:

    1) I checked the Rulz - think I am good.  Tried turning off IPS just in case, didn't seem to do anything.

    2) I had "create automatic firewall rules" checked on both sides, and confirmed in webadmin that "any" rules should allow traffic for anything through the tunnel.

    3) Any other ideas?

Children
Unfiltered HTML