topic Call 1-855-935-7526 US & in Network Security

Site-to-Site VPN issues

tstrode01 — Tue, 12 Mar 2019 06:35:38 GMT

Hello,

I have created to two site-to-site VPN profiles, one test and one production. They have separate inside and outside private IPs, but are part of the same network object group. Both connections show as connected, however, the production connection does not pass traffic. I do a packet trace from the test ip with no problem. Doing a packet trace from the production ip and the packet is dropped: "(acl-drop) Flow denied by configured rule". What am I missing?

Call 1-855-935-7526 US &

Router-support — Mon, 14 Sep 2015 15:12:19 GMT

Call 1-855-935-7526 US & Canada Toll-Free For Router Help & Support.

Official help and support Number for Routers. Links to Router customer support and technical solutions, set-up, help, and answers to top issues.

Hi tstrode1,Have you tried

John Forester — Mon, 14 Sep 2015 20:32:56 GMT

Hi tstrode1,

Have you tried putting them in separate network object groups, and using a unique acl for each one? Can you paste in the portions (acls, network object groups, and crypto map) that apply?

Thanks

I've tried putting them in

tstrode01 — Tue, 15 Sep 2015 19:47:02 GMT

I've tried putting them in separate network object groups and using a separate acl for each one. Still no traffic.