About WizJ

WizJ · 10-27-2022

Reading this post has led me to believe i have a ip route issue. https://community.cisco.com/t5/vpn/cannot-ping-machines-on-remote-subnet-while-site-to-site-vpn/td-p/1469344Cisco 1921 -> 192.168.1.1 Machine on 192.168.1.2WG T20 -> 10.0.1.1 Machine o...

WizJ · 10-25-2022

Just FYI networking is not my strong suit. I do software development, so I apologize if i do not know terminology or ask a stupid question. So i am trying to use this Cisco as a test for a Site to Site Vpn tunnel for a real time HL7 project i am codi...

WizJ · 10-24-2022

Just FYI networking is not my strong suit. I do software development, so I apologize if i do not know terminology or ask a stupid question. So i am trying to use this Cisco as a test for a Site to Site Vpn tunnel for a real time HL7 project i am codi...

WizJ · 10-31-2022

I pinged the machine @ 10.0.1.25 from the WatchGuard GUI and lost all packets. I have no Routes setup in the WatchGuard. The problem must be there. I will refer to the WatchGuard documentation and try and figure that end out. Thanks again Rob.

WizJ · 10-31-2022

Ok. I have all of that in place. I am now able to ping the router from a machine on the opposing network but still unable to ping the machines. EG. ping from machine @ 192.168.1.2 to 10.0.1.25 times out but pinging the gateway (10.0.1.1) works fine.

WizJ · 10-31-2022

So the Crypto map ACL is permitting traffic from one network to the other and that will go through the VPN and be encrypted. While the NAT ACL will deny traffic from one network to the other (which should go through the VPN) and allow all other traff...

WizJ · 10-31-2022

This ACL is being applied to my crypto map. In this scenario it is a test environment. I do not want to block any traffic really. Is there a way I can just let all traffic go through? All i need to do is send data from the machine on the 192.168 netw...

WizJ · 10-31-2022

That is what i was thinking. So should my ACL 101 beaccess-list 101 permit ip 192.168.1.0 0.0.0.255 10.0.1.0 0.0.0.255access-list 101 deny ip 192.168.1.0 0.0.0.255 10.0.1.0 0.0.0.255access-list 101 permit ip 192.168.1.0 0.0.0.255 anyOr just the two:a...

Member Since	‎10-21-2022 11:15 AM
Date Last Visited	‎10-26-2022 12:03 AM
Posts	23

User Statistics

User Activity

Cisco to WatchGuard VPN Tunnel Cant Ping machines only the routers

Cisco 1921 to WatchGuard T20 No Phase 2 Security Associations

Cisco 1921 to WatchGuard T20 Unable to find active Phase 2 SA

Re: Cisco to WatchGuard VPN Tunnel Cant Ping machines only the routers

Re: Cisco to WatchGuard VPN Tunnel Cant Ping machines only the routers

Re: Cisco to WatchGuard VPN Tunnel Cant Ping machines only the routers

Re: Cisco to WatchGuard VPN Tunnel Cant Ping machines only the routers

Re: Cisco to WatchGuard VPN Tunnel Cant Ping machines only the routers