cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
521
Views
0
Helpful
3
Replies

VPN Connectivity

BHconsultants88
Level 1
Level 1

Hi guys

 

I'm hoping someone can help me out with an issue I'm experiencing while trying to get two sites to talk to each other.


Site A - 10.20.4.0 /24

Site B - 192.168.142.0 /24

 

Site A can talk to Site B via a Cisco ASA (VPN concentrator). Site A can ping Site B's public and LAN IP with no problem.

 

However, Site B cannot ping Site A even though the tunnel is up. The interesting thing is when Site B restarts the VPN service, pings start but then a minute or so later stops working.

 

Has anyone seen this behaviour before as it's really puzzling me. I've attached configs for each site.

 

Thanks in advance.

3 Replies 3

Dennis Mink
VIP Alumni
VIP Alumni

sounds like site A is keeping the tunnel up,

 

can you test traffic, using the packet tracer tool on the ASA (are both ends ASA?), to see why traffic gets blocked

Please remember to rate useful posts, by clicking on the stars below.

Thanks for the response Dennis. I've attached a packet trace test that I ran from the Cisco ASA (from Site B to Site A). I can't see why the drop would occur.

 

To confuse matters further, site A is using a Digi Trans WR44V2 router (specialist router for industrial environments). Site B is using a VPN device hosted in the AWS cloud.

Attached are packet traces from Site A to Site B and vice versa on the INSIDE interface

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: