I just bought a new VPN 3005 and trying to create a lan-to-lan connection to one of our client who also has a same box. We managed to connect but I can ping them but they can't ping me. And nothing else seems work like FTP or Telnet either direction.
Here is our network diagram. http://mail.verus-tech.com/network.gif (Router on both end means Cisco VPN 3005)
Initially we set them up using pretty much basic setting with no NAT involved. We were able to establish an active session and I was able to ping 10.100.10.100 from our server 65.203.232.253. However client can't ping our server from there. And that's about it as I can't telnet or FTP into the client's server either.
After trying out just about everything I suggested to client that they configure NAT on their firewall so that 10.100.x.x network behind the VPN box will get translated to public IP address. We are both new to IPSec lan to lan thing so we have no idea how to configure this or whether this is needed in our case.
Can anyone help me out?
Thanks.
tj
