This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSEC Scenario, cant route specific traffic

Hello everyone.

im getting crazy with this...

I have 2 sites, one withe 192.168.21.0/24 and the principal Site with the 192.168.19.0/24.
I have a linksys connected to the sophos via ipsec and i can see the 2 networks without any problem. But, i have a machine in the secondary site that needs to go out to the internet via the 192.168.19.20 router that its in the LAN.
In the principal site there is no problem because i have a routing in the sophos.

Even with a full tunnel its not working...
Can u help me please??

Thanks

This thread was automatically locked due to age.

Parents

0 LuCar Toni over 3 years ago

IPsec Issues could be caused by the Sophos End or the other End.

Follow the packet if possible. So ping from your sophos End to the other end and check in the packet capture of XG. Do you see the packets?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog over 3 years ago in reply to LuCar Toni

From you chart is is unclear what is the router that makes the IPSec with the XG. Maybe it is the router 192.168.19.20?
Cancel
Vote Up 0 Vote Down

Cancel
0 Antonio Beired over 3 years ago in reply to LHerzog

the router making the ipsec its 192.168.21.2. the one on the bottom of the chart.
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog over 3 years ago in reply to Antonio Beired

Probably the router 192.168.19.20 then does not have the route information that it finds the network 192.168.21.0/24 behind the XG 192.168.19.2. Probably the back-route for the packets is just missing there. But I must admin, I do not understand your goal: 192.168.21.22 needs to access internet over 192.168.19.20? Why that - the Internet access seems to be via the XG. Perhaps you redesign your chart that it can be seen, where the internet connections are.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 LHerzog over 3 years ago in reply to Antonio Beired

Probably the router 192.168.19.20 then does not have the route information that it finds the network 192.168.21.0/24 behind the XG 192.168.19.2. Probably the back-route for the packets is just missing there. But I must admin, I do not understand your goal: 192.168.21.22 needs to access internet over 192.168.19.20? Why that - the Internet access seems to be via the XG. Perhaps you redesign your chart that it can be seen, where the internet connections are.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Antonio Beired over 3 years ago in reply to LHerzog

The 192.168.21.22 needs to access internet over 192.168.19.20 because its a brand adsl and only syncs that way.
Cancel
Vote Up 0 Vote Down

Cancel