Solved

Site to Site VPN Establishes Tunnel - Unable to Pass Traffic

Posted on 2009-05-15
3
283 Views
Last Modified: 2012-05-07
All my site to site VPN users are able to establish the tunnel and pass phase 1 and 2.  They are unable to access the servers/workstations on our network.  Our PPTP VPN users are working as normal.  All connections were working fine until we replaced a core switch in our main location.  We are running the same build on this switch as the one we replaced.  I feel this is a security issue on the switch, but unable to pinpoint. Any help is appreciated.
0
Comment
Question by:AdminBWC
3 Comments
 
LVL 13

Accepted Solution

by:
Quori earned 125 total points
Comment Utility
What is terminating the IPsec tunnels? Can you provide a network diagram and any relevant configs?
0
 
LVL 1

Assisted Solution

by:equarando
equarando earned 125 total points
Comment Utility
Please post make and model of switches/hardware and configs
0
 

Author Comment

by:AdminBWC
Comment Utility
Thanks to you both for responding, but we were able to resolve the issue with Cisco support.  It was not a logical resolve as no one can tell me "why" it occurred, but they did find a fix.  When asked why it had been working fine for years and now it is not, I believe the term "magic" occurred in one engineer's response.  
And to help those with the same issue in the future, ACLs permitting outside traffic coming in had to be added for all my crypto clients. Clients running just fine for up to 3 years without any problem and no changes just magically stopped working.
I'm giving the points to both of you even though the issue was resolved on my end.  Good day to you both!
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

When you connect to your workplace's VPN, you may not notice that you are using your workplace's servers to serve up webpages.  This might be undesirable since the workplace can log all the places you've been.  It also might be very slow to load pag…
This tutorial will go through the steps required to write a script that will back up the configuration settings of a HP-ProCurve switch. You will need to get the following things to follow this tutorial: Telnet Scripting Tool e.g. TST10.exe …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now