UC520 Site-to-Site VPN

[Simon Guldager Andersen]

Hi All

I have this very weird problem (at least for me)

I have a UC520 connected to an ASA5510 via Site-to-Site VPN.

I can ping from clients behind UC520 to client behind ASA5510.

I can ping from clients behind ASA5510 to client behind UC520

I can access services (like RDP) from clients behind UC520 to client behind ASA5510

I can't access services (like RDP, HTTP) from clients behind ASA5510 to client behind UC520

Does anyone have a clue where i need to look? I tried to rule out all access list by (temporarily) making a permit ip any any line in these.

I think it must be some kind of NAT issue, but im not sure.

Thanks in advance

[bjames]

This is fun

To humor me can you set the MTU to 1400 on both inside segments/interfaces

[Simon Guldager Andersen]

OMG! 192.168.10.11 and .31 actually did have a wrong default gateway defined - i could kill the old IT-administrator for making this wrong!!!!

Guess what, i can access 192.168.10.11 and 192.168.10.31 without any problems now.

Can't believe you nailed this one, we could probably have been going on for hours of configuration-debugging without any results.

[bjames]

Glad it's fixed.

[Simon Guldager Andersen]

Bob and djh278778

Just want to thank you guys alot - help was really appreciated