Migrating from Site to Site VPN to MPLS
Posted on 2014-04-16
We've recently switched from a site to site VPN to an service provider MPLS. So, I removed (so I think) all remnants of the site to site VPN in the ASA's. The subnets are subnet 1 and subnet 2. The MPLS is a separate network on connection on a service provider router. I have put the command:
route inside 192.168.2.0 255.255.255.0 192.168.1.2 on the network 1 ASA
route inside 192.168.1.0 255.255.255.0 192.168.2.2 on the ASA on Subnet 2 ASA
I can ping 192.168.1.2 and 2.2 from the opposite networks. But, when I try to ping from the desktops, it won't cross. If I tracert it, it times out before it even gets to the default gateway.
What am I missing? I know I have ICMP blocked going outbound, but it should work across the MPLS.
Traffic should flow as follows:
1. Client PC
3. MPLS Router
4. Remote MPLS Router
5. Remote device.
What can I look for? Any suggestions would help.