networking-forum.com
Community Blog • Community Wiki * Register  * Search  * Login
View unanswered posts • View active topics

Board index » Cisco Networking » Cisco General

All times are UTC - 6 hours [ DST ]


Post new topic Reply to topic  Page 1 of 1
  [ 5 posts ] 
  Print view Previous topic | Next topic 
Author Message
orange juice
 Post subject: tunnel issue
PostPosted: Tue May 29, 2012 9:11 pm 
Offline
New Member
New Member

Joined: Thu May 17, 2012 8:04 pm
Posts: 6
Certs: ccna
Hey all, I'm in trouble with tunnel.
One site is juniper ssg140 and the other site is Cisco Router ,and they can establish IPSEC VPN and also can Ping by physical interface, but Whatever I config the tunnel mode is GRE or not the tunnel IP can't ping each other . I guess I am missing something . but I have not the config details. Is there anyone have the same issue ? And how to resolve it ？
Any ideas thank you!
Top
 Profile  
 
mellowd
 Post subject: Re: tunnel issue
PostPosted: Wed May 30, 2012 3:03 am 
Offline
CCIE #38070
CCIE #38070
User avatar

Joined: Wed Jun 18, 2008 7:49 am
Posts: 12471
Location: London, UK
Certs: CCIE ,CC-NP/IP, JNCIP-SP, JNCIS-ENT, BC-/SPNE/NP
I've done these types of tunnels hundreds of times.

Are you doing a route-based or policy-based vpn on the SSG?

Let me see both configs.

Anything in the Juniper log about phase 1 or phase 2 not working?

_________________
www.mellowd.co.uk/ccie/
Top
 Profile  
 
orange juice
 Post subject: Re: tunnel issue
PostPosted: Wed May 30, 2012 9:12 pm 
Offline
New Member
New Member

Joined: Thu May 17, 2012 8:04 pm
Posts: 6
Certs: ccna
The IPSEC VPN is established and the connection is ok.
The problem is why the tunnel IP can not Ping each other ? and that is customer want to know.
Top
 Profile  
 
burnyd
 Post subject: Re: tunnel issue
PostPosted: Wed May 30, 2012 10:00 pm 
Offline
Post Whore
Post Whore
User avatar

Joined: Fri Nov 13, 2009 5:15 pm
Posts: 2048
Location: Pittsburgh
Certs: CCIE R&S,CCIP,JNCIA,VCP510
Cant ping the peer IP's or you cannot ping anything from one side of the vpn to the other side of the vpn?

_________________
"I will prepare and some day my chance will come." - Abraham Lincoln
http://danielhertzberg.wordpress.com - I blog about networks!
Top
 Profile  
 
lostinpattaya
 Post subject: Re: tunnel issue
PostPosted: Mon Jun 04, 2012 9:03 pm 
Offline
Member
Member

Joined: Mon Jul 04, 2011 11:09 pm
Posts: 106
Location: Brooklyn, NY
Certs: CCNP ROUTE, CCNA, Security +
orange juice wrote:
The IPSEC VPN is established and the connection is ok.
The problem is why the tunnel IP can not Ping each other ? and that is customer want to know.


With GRE tunnels, this can be misleading. Are you able to pass any traffic on layer 3? Or does the tunnel say "up/up" and that's as far as you can go?
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 5 posts ] 

Board index » Cisco Networking » Cisco General

All times are UTC - 6 hours [ DST ]

Who is online

Users browsing this forum: Google Feedfetcher, Pete and 8 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group