VPN Connection Issue to NX-API Always On Sandbox
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-10-2017 07:11 AM - edited 06-04-2019 02:28 AM
I am a Cisco employee. I've tried to connect to the always on VPN hub devnetsb13.cisco.com from two different external internet providers (Verizon FiOS and AT&T's LTE network) but the connection times out. However, if i take the same machine and attempt to connect from a Cisco internal network to devnetsb13, the connection is able to be established. I am able to VPN to other sites from the external providers I mentioned.
I worked with Joseph Kernes and was able to establish a connection to 64.103.37.6 (i.e. devnetsb14.cisco.com) from one of the external sites I previously mention.
- Labels:
-
Connectivity Issues and VPN
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-10-2017 07:17 AM
I mis-spelled the gentleman's name I worked with. It is actually Joseph Kearns. I was able to establish a VPN connection to the other location to verify that the provider wasn't blocking VPN connections.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-10-2017 09:44 AM
Also I am able to both resolve the IP and ping devnetsb13.cisco.com from both external sites as well. Just wanted to provide as much information as possible to facilitate troubleshooting.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-28-2017 06:55 AM
Hi,
Just back from CL Berlin and looking at this case.
Perhaps the best approach here is to have a Webex and troubleshoot. Let me know when suits you and I can arrange.
Joe
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-28-2017 12:25 PM
I have some availability tomorrow (Wednesday March 1st). Feel free to pick an open slot and send me a calendar invite.
-
Tony Winfield
Cisco Systems – Vertical Solutions Architect
111 Wood Avenue South
ISELIN, NEW JERSEY 08830
Office/Mobile: 732-516-5999 - Single Number Reach (will ring all phones)
JabberCall Me<https://jabberguest.cisco.com/call/88948742@cisco.com?name=Tony%20Winfield>
browser-based video chat.
For technical support issues the TAC can be reached at 1-800-553-2447 or
http://www.cisco.com/en/US/support/index.html
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-01-2017 07:17 AM
I have flexibility today. I’m good in the morning until 11:00AM ET. Then I’m free any time after 1:30pm. ET Just send me the calendar invite with the WebEx. I have a couple of machines so one can be off the Cisco network and one can be one if that will help in troubleshooting.
Thanks for following up.
-
Tony Winfield
Cisco Systems – Vertical Solutions Architect
111 Wood Avenue South
ISELIN, NEW JERSEY 08830
Office/Mobile: 732-516-5999 - Single Number Reach (will ring all phones)
JabberCall Me<https://jabberguest.cisco.com/call/88948742@cisco.com?name=Tony%20Winfield>
browser-based video chat.
For technical support issues the TAC can be reached at 1-800-553-2447 or
http://www.cisco.com/en/US/support/index.html

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-23-2017 07:45 AM
Have you tried setting your VPN MTU to somethng small like 500?
Sometimes IPSec breaks up packets in an unfriendly way.
