cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Community Helping Community

898
Views
0
Helpful
2
Replies
Highlighted
Beginner

Clients cannot access remote Lan via vpn (but router can)

I have a Easy VPN remote configured on an 877 router, connecting to an 1801 running Easy VPN server. The vpn connects, and the 877 can ping clients on the remote network, but no clients on the LAN connected to the 877 can ping the remote LAN. Both sites use internal IP schemes and Nat to the Internet, but I believe I have filtered it correctly to prevent the vpn traffic being nat-d, and no packets are dropped by firewall. The IP schemes do not overlap.  Any ideas where I'd go to troubleshoot this? I've gone through all the scenarios on the IPSec VPN troubleshooting page, but none of them seem to cover my issue.

Everyone's tags (2)
2 REPLIES 2
Beginner

Re: Clients cannot access remote Lan via vpn (but router can)

Hmmm didn't you forgot to add an static NAT on the 877 side to redirect

incoming traffic back to the right host?

Beginner

Re: Clients cannot access remote Lan via vpn (but router can)

I have an ACL on the 877 that prevents traffic to the remote network being nat-d in the first place, so return traffic will also not require natting: it should be straight network to network.

I have looked at the IP net translations after trying to ping the remote network, and there are no entries, so I conclude the vpn traffic is not being natted, as expected. So I do not think Nat is the cause of the problem. But I cannot think what else could be causing the problem.

CreatePlease to create content
Content for Community-Ad
FusionCharts will render here