Draytek Vigor 2930 blocks remote ping via VPN to one server on host lan

This is beyond me ...

Host LAN is 192.168.1.0
Remote LAN is 192.168.10.0

Host router is Draytek Vigor 2910.
Remote router is Draytek Vigor 2930.
Both have been in service for years with no issues and have been updated with latest firmware before VPN was configured.
VPN is established between these and has run reliably via ADSL2 WAN for a couple of months.

Until lately, two + two servers have been in service, two at each location.
Now - when expanding to three servers at each location - the issue with the one of the two new servers installed (one at each location):

At remote LAN I can ping three servers at remote LAN from workstations.
From host LAN I can ping these servers at remote LAN:
  - from host router 192.168.1.1 with the diagnostic tools
  - from workstation on host LAN
 
At host LAN I can ping three similar servers at host LAN from workstations.
From remote LAN I can ping these servers at host LAN:
  - from remote router 192.168.10.1 with the diagnostic tools

but from workstations on remote LAN I can ping only the two old servers at host LAN.

I have checked up and down, back and forth, but cannot see anything that could possibly block a ping between workstations on remote LAN and their router for this address, 192.168.1.222, of the new server only.

Firewall is active at both ends with the default filters. I have tried to switch both off but that changes nothing.

Where could I look to solve this, please?

/gustav
Private routing table at host LAN:
S~       192.168.10.0/   255.255.255.0 via 192.168.1.11,    VPN
C~       192.168.1.11/ 255.255.255.255 is directly connected,    VPN
C~        192.168.1.0/   255.255.255.0 is directly connected,    LAN

Private routing table at remote LAN:
C~       192.168.10.0/   255.255.255.0 is directly connected,    LAN
C~        192.168.1.1/ 255.255.255.255 is directly connected,    VPN
S~        192.168.1.0/   255.255.255.0 via 192.168.1.1,    VPN

Open in new window

LVL 54
Gustav BrockCIOAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

basbasbasCommented:
Try a tracert from a remote node to 192.168.1.222 and to one of the other two servers on the host network and look for differences. (Are you able to ping the other two hosts on the host network from remote?)

Are you able to ping remote nodes from the 1.222 server? Perhaps something is wrong with the default gateway on 1.222?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Gustav BrockCIOAuthor Commented:
A tracert from a remote node to 192.168.1.222 finds the router, then fails.
A tracert to either of the other two servers on the host network succeeds.

> Perhaps something is wrong with the default gateway on 1.222?

That was it!

The story is, that these new servers are Openfiler. However, that at the remote site was installed via the GUI while that at the host via the text interface.

At the remote site, the server was specified to use DHCP (stupid me, but it was the first install and only meant as a test). Thus, the field for the default gateway is left blank.

At the host site, the server was specified to use a fixed address, but for some strange reason the default gateway is suggested as 192.168.1.254. This didn't work and I blanked it as the field was blank at the remote site while I forgot why it was blank.

Now I specified 192.168.1.1 and the ping was returned.
Leason learned. Thanks for the help and insight!

/gustav
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.