Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 11045 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Tunnel is up but can't ping internal IP's

bken
I have a feeling I'm missing something obvious here. I have and IPsec site to site VPN up and running between my ASG(8.305) and a Lancom DSL router. I can ping from the ASG to the internal router IP of the Lancom device. I can also ping from machines inside the ASG to the internal IP of the Lancom device.
From the Lancom device I can ping the external interfaces of the ASG but I can't ping the internal IP ASG address or any PC's on the internal subnet. 
I have firewall rules set up to accept all traffic from the internal network on the Lancom router side. I don't see anything being dropped in the firewall logs. 
Any help is much appreciated.


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to BarryG
    Hi Barry, Thank you for your reply. I set the ICMP settings and Ping settings to allow everything. 

    ICMP =  Allow ICMP on firewall & Allow ICMP through firewall

    Ping = Firewall is ping visible/Ping from Firewall/Firewall forwards pings. 

    Thx
  • 0 in reply to bken
    This has been solved. The issue was that the router on the far end was not routing packets bound for the internal IP address of the Astaro through the VPN tunnel. Therefore, packets were being dropped immediately at the far end. 

    Thx!