DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

2 off 2830s lan to lan ipsec vpn, can't ping other network.

More
11 Jan 2012 16:43 #7 by stuey
Replied by stuey on topic Re: 2 off 2830s lan to lan ipsec vpn, can't ping other netwo

johntankard wrote: Hi Guys,

You have probably done this but you do know that now firewall rules apply to vpn traffic, I had this accross a VPN where the VPN established but could not access anything, I had to create a firewall rule to allow both subnets full access to each other, I know I could limit it down but the traffic is clean so I just opened up all ports.

Regards

John



Hi John,

Any chance you could explain how to do this?

Thanks

Please Log in or Create an account to join the conversation.

  • accesspanels
  • User
  • User
More
27 Jan 2012 16:45 #8 by accesspanels
Replied by accesspanels on topic Re: 2 off 2830s lan to lan ipsec vpn, can't ping other netwo
Having the same problem:

followed this guide: http://www.draytek.co.uk/support/vpn_setup.html

Can ping the WAN ip from both ends can ping LAN ip of the roter from both ends no problem but that's it.

tried disabling the call and data filter on both sides still no good

Any ideas???

Please Log in or Create an account to join the conversation.

More
28 Jan 2012 17:49 #9 by blackhat72
Replied by blackhat72 on topic Re: 2 off 2830s lan to lan ipsec vpn, can't ping other netwo
have you logged into each draytek and checked that each rotuer knows about the opposite network via the vpn interface?

I had the similar problem ages on with two 2910's, you have to create the route for 192.168.30.0/mask on the 192.168.50.1's router and vica versa
Technical Consultant.

www.fahrenheit-it.com

Please Log in or Create an account to join the conversation.

  • accesspanels
  • User
  • User
More
29 Jan 2012 21:07 #10 by accesspanels
Replied by accesspanels on topic Re: 2 off 2830s lan to lan ipsec vpn, can't ping other netwo
How would I do that then?

A static router?

Please Log in or Create an account to join the conversation.

  • accesspanels
  • User
  • User
More
29 Jan 2012 21:24 #11 by accesspanels
Replied by accesspanels on topic Re: 2 off 2830s lan to lan ipsec vpn, can't ping other netwo
Profab Unit 45-48 BeThere Receiver

LAN IP: 192.168.16.1
WAN IP: 78.86.232.218
SUBNET: 255.255.255.0
GATEWAY: 78.86.232.1
DNS: 87.194.0.66 & 87.194.0.67

Profab Unit 52 BeThere Dialer

LAN IP: 192.168.1.1
WAN IP: 188.222.84.93
SUBNET: 255.255.255.0
GATEWAY: 188.222.84.1
DNS: 87.194.255.154 & 87.194.255.155

Please Log in or Create an account to join the conversation.

More
31 Jan 2012 22:15 #12 by bb193
Replied by bb193 on topic Re: 2 off 2830s lan to lan ipsec vpn, can't ping other netwo
Is it just me, or do these two threads describes the same problem, but one with a 2820 and one with a 2830?

Surely there must be someone out there who can explain how to setup IPSEC VPNs, allowing drayetks to ping other subnets with the same first two octets?

2830 - http://www.forum.draytek.co.uk/viewtopic.php?f=8&t=16316

2820 - http://www.forum.draytek.co.uk/viewtopic.php?f=8&t=16871

Please Log in or Create an account to join the conversation.