Hi,

I'm trying to configure a lan-to-lan ipsec vpn between two router 2820 (172.18.1.0 dial-out) and 2960 (172.20.5.0 dial-in).

The vpn is established correctly, but the computers in 2820 cannot communicate with the 2960 network, the 2960 can communicate with the 2820.

The problem seams to be in the routing table of the 2960, but i tried every configuration and the default gateway of the 2960 to the 2820 network is always the same, the public ip of the 2960 and not the public ip of the 2820 like it should be i think.

The 2820 was previously connected with a 2950 and it worked ok.

In the VPN Profile, I have a IPsec vpn with the following settings.

Local ip/subnet: 172.20.5.0/24
Local Next Hop: 0.0.0.0
remote host: 0.0.0.0
remote ip/subnet: 172.18.1.0/24

The IKE Phase is in Aggressive mode and PSK (this part works fine because the vpn connection is established ok)

Still, the problem is that from 172.18.1.0 i cannot ping the addresses in 172.20.5.0 (the addresses are pin-gable and no other equipment is between them)

Thanks in advance for your help.