Guest User!
You are not Sophos Staff.
I created IPsec tunel and its all green , but i can't conect to remote server
i have Inbound end outbound rules
but I don't have any connection between the two LAN servers.
So I have to create some static route after having the tunnel stabilized?
or what i have to do
On otherr site
root@recargaki-moz2 MOZ]# traceroute 192.168.30.168
traceroute to 192.168.30.168 (192.168.30.168), 30 hops max, 60 byte packets
1 192.168.15.1 (192.168.15.1) 0.488 ms 0.507 ms 0.539 ms
2 196.40.113.8 (196.40.113.8) 0.321 ms 0.319 ms 0.298 ms
3 196.40.117.210 (196.40.117.210) 0.228 ms 0.409 ms 0.383 ms
4 *
5 *
6 *
7 *
8 *
o the trace is correct as you can see it matches the policy
On otherr site
root@recargaki-moz2 MOZ]# traceroute 192.168.30.168
traceroute to 192.168.30.168 (192.168.30.168), 30 hops max, 60 byte packets
1 192.168.15.1 (192.168.15.1) 0.488 ms 0.507 ms 0.539 ms
2 196.40.113.8 (196.40.113.8) 0.321 ms 0.319 ms 0.298 ms
3 196.40.117.210 (196.40.117.210) 0.228 ms 0.409 ms 0.383 ms
4 *
5 *
6 *
7 *
8 *
o the trace is correct as you can see it matches the policy
and on my site
That other site's traceroute does not look correct at all to me.
Normally you have 2 - 3 hops maximum if using a direct ipsec tunnel from site-to-site.
Yours seems to go to the WAN.
But you give too little info here, we would need some kind of network diagramm to help you out.
No need to hide internal IP, and you could obfuscate the public IP like that: 85.xx.yy.115 for better understanding.
