cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
453
Views
0
Helpful
2
Replies

Internet through vpn working incorrectly

Artem Kolpakov
Level 1
Level 1

Hi all!

I'm trying to construct the following scheme for the users. Some of them went to the Internet directly from the device through NAT, some access to the Internet via a device located at the other end of the gre-ipsec tunnel. But here the problem occurs. Almost all sites are not opened (except Google), though I can perform ping and traceroute to them (of course, through vpn). I thought that the problem may be in cipher and I tried to delete the IPSEC, leaving only the GRE tunnel. But the problem is not solved.

What could be the problem?

Thank you!

2 Replies 2

andrewswanson
Level 7
Level 7

have you tried reducing mtu size of hosts using gre tunnel? - had similar issue with a gre tunnel and hosts unable to access some websites. this document explains reasons why:

http://www.cisco.com/en/US/tech/tk827/tk369/technologies_tech_note09186a0080093f1f.shtml

hth

andy

Andy, thanks a lot!

This is a solution!