Solved

Troubleshooting a Cisco Router VPN tunnel

Posted on 2004-08-12
2
464 Views
Last Modified: 2010-04-17
I'm having a challenge troubleshooting a 1 way VPN tunnel terminating at my Cisco 3620 router and customers Checkpoint Firewall. After debugging the crypto I know the tunnel is built and I can successfully send ICMP traffic into their internal network, however TCP traffic doesn’t flow. The customer indicates he doesn’t see TCP traffic hitting his Firewall. I have 2 other VPN connections built in a similar configuration and they work fine TCP and ICMP. I've run out of ideas.
0
Comment
Question by:ubergenius
2 Comments
 
LVL 13

Accepted Solution

by:
td_miles earned 100 total points
ID: 11789171
Assuming that you have an access-list to define interesting traffic to be encrypted, enable logging of the ACL, then see if the traffic you are attempting to send is matching the acl (and hence being encrypted on your ends).

Also ensure that the ACL's that you are using match identically on both ends.
0
 
LVL 50

Expert Comment

by:Don Johnston
ID: 15651278
No comment has been added to this question in more than 21 days, so it is now classified as abandoned..
I will leave the following recommendation for this question in the Cleanup topic area:

RECOMMENDATION: Delete - No Refund

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

donjohnston
EE Cleanup Volunteer
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Connecting LAN to a new leased line 2 55
Fortigate 100D NTP Issue 4 80
Router assigned IP addresses 18 92
looking for a program or router to monitor internet connection 4 51
While it is possible to put two routes in place with the secondary having a higher metric, this may not always work. In the event of a failure that does not bring down the physical interface on the router the primary route is not removed. There is a…
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question