cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1324
Views
0
Helpful
6
Replies

Cannot access yahoo after tunnel

nshirabakwaku
Level 1
Level 1

Hello all,

I have a funny problem and it is taking up my whole time.

I am doing a hub and spoke network through and ipsec vti.

after I have done the configurations, all works well but funny enough, I cannot access yahoo or cisco from the spoke. All other access to the internet works well without any problems. The only issue is that, I cannot access www.yahoo.com and www.cisco.com when the traffic goes through the tunnel.

Have anybody experienced this before?

PS there are no access-list blocking the traffic.

Could this be a BUG

1 Accepted Solution

Accepted Solutions

newtwork1
Level 1
Level 1

Joseph,

This happened to me before with cisco.com hotmail.com and engadget.com. With the information provided I'd suggest you check fragmenation, I changed my MTU on the host machine and it was fine. I think i dropped it to 1300.

Newt

View solution in original post

6 Replies 6

get_rthym
Level 1
Level 1

Hi

Doing trace route may help u see the trouble point.

HTH

Sent from Cisco Technical Support iPhone App

newtwork1
Level 1
Level 1

Joseph,

This happened to me before with cisco.com hotmail.com and engadget.com. With the information provided I'd suggest you check fragmenation, I changed my MTU on the host machine and it was fine. I think i dropped it to 1300.

Newt

I have set the host pc's mtu to 1300 but no luck. I can access all website when I take off the tunnel but immediately I put it back, yahoo.com  cisco.com starts timing out.

Any more help will be appreciated

But every other website you try works? If other websites work I feel like it's a fragmentation problem.

So you take encryption off the tunnel interface and yahoo and cisco work? Are you static routing? any chance to see the two configs?

Hi all,

Thanks for all your help. The problem is resolved. It was the mtu issue on the host pc. Initially I set the mtu on a different LAN interface card. I changed the correct the mtu on the correct interface and BINGO!, things yahoo, cisco and all others came. Thanks Newt Work for your help.

Ps: Is there a way to have the router direct all LAN hosts to set the MTU to 1300 or a different value instead of doing this on all the hosts in the LAN?

Eugene Khabarov
Level 7
Level 7

Joseph, I've already answered your question in VPN section. Why do you created another discussion?

https://supportforums.cisco.com/thread/2112001?tstart=0

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: