Hi there,
i have followed this guide on how to create IPSec site to site VPN. I am using a 2600 at the head office and a 2820 and the remote site.

the remote site is on 192.168.3.0 and the head office on 192.168.4.0

i am only able to ping from the remote site to the head office, and even then - only the vigor (not any hosts inside the network). i cannot ping across the VPN at all from the head office.

on the 2820, there is an option that defines what to do when with traffic from first subnet to tries to reach the second subnet. i have set it to route - but there is no such option on the 2600.

do i need to add a static route?

thanks for your help!

J

I had the same problem, but in the end I realised that it was the windows firewall on the PC which I was using for testing was stopping the ping reply.

Switching off the PC firewall sorted it out.

Can you check your subnet netmasks at each end of the tunnel?