Site to Site VPN Connects but can't ping devices

Site to Site VPN Connects but can't ping devices

Site to Site VPN Connects but can't ping devices
Site to Site VPN Connects but can't ping devices
2023-11-15 22:23:37 - last edited 2023-11-17 01:39:44
Tags: #VPN
Model: ER605 (TL-R605)  
Hardware Version:
Firmware Version:

Hi,

I have set up a site to site office scenario where a branch office connects to a home office using ER605s. I am using Omada controller and the branch office connects successfully to the home office and i can ping the ER605's from both ends. From the home office i can also ping the PC that the branch office controller software is running on, but no other devices. I cannot ping any devices on the head office. I've watched the youtube videos and have tried to set this up many times, but always the same results. Any help would be appreciated. 

 

From the log on the home office

 

4 2023-11-15 15:43:44 IPsec NOTICE [osg:40-ED-00-6E-BC-EE]: Set up IPsec connection successfully. (Peers=x.x.167.85<->x.x.58.109)
5 2023-11-15 15:43:44 IPsec NOTICE WAN: Phase 2 of IKE negotiation succeeded. (Peers=x.x.167.85<->x.x.58.109)
6 2023-11-15 15:43:43 IPsec NOTICE WAN: Phase 1 of IKE negotiation succeeded. (Peers=x.x.167.85<->x.x.58.109)

 

ipconfig from the branch office:

Wireless LAN adapter Wi-Fi 2:

   Connection-specific DNS Suffix  . : lan
   IPv4 Address. . . . . . . . . . . : 192.168.0.108
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.0.1

 

ipconfig from the home office:

Ethernet adapter Ethernet 4:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::ff8e:1063:ef57:c58c%11
   IPv4 Address. . . . . . . . . . . : 192.168.1.110
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.1.1

  0      
  0      
#1
Options
2 Accepted Solutions
Re:Site to Site VPN Connects but can't ping devices-Solution
2023-11-16 02:29:57 - last edited 2023-11-17 01:39:44

Hi @hoffmanjp 

Thanks for posting in our business forum.

Question, is the 192.168.0.1 or 192.168.1.1 pingable? I mean you ping the remote subnet gateway. e.g. when your PC is in 192.168.0.1/24, ping the 192.168.1.1 which is the VPN remote gateway.

Regardless of computers' IPs, I need to know if the gateway is pingable or not. This should be pingable by default.

Mostly, the computer is not pingable due to the firewall issues. I just need to make sure your VPN tunnel is through. The firewall issue would be the MS problem. Usually, use the Private Network would allow access.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Beta firmware got some NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
Recommended Solution
  0  
  0  
#2
Options
Re:Site to Site VPN Connects but can't ping devices-Solution
2023-11-16 02:40:16 - last edited 2023-11-17 01:39:46

  @hoffmanjp 

 

Duh, works great now. Didn't even dawn on me that it was the stupid firewall.

 

Thank you Thank you Thank you!

 

Recommended Solution
  0  
  0  
#3
Options
2 Reply
Re:Site to Site VPN Connects but can't ping devices-Solution
2023-11-16 02:29:57 - last edited 2023-11-17 01:39:44

Hi @hoffmanjp 

Thanks for posting in our business forum.

Question, is the 192.168.0.1 or 192.168.1.1 pingable? I mean you ping the remote subnet gateway. e.g. when your PC is in 192.168.0.1/24, ping the 192.168.1.1 which is the VPN remote gateway.

Regardless of computers' IPs, I need to know if the gateway is pingable or not. This should be pingable by default.

Mostly, the computer is not pingable due to the firewall issues. I just need to make sure your VPN tunnel is through. The firewall issue would be the MS problem. Usually, use the Private Network would allow access.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Beta firmware got some NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
Recommended Solution
  0  
  0  
#2
Options
Re:Site to Site VPN Connects but can't ping devices-Solution
2023-11-16 02:40:16 - last edited 2023-11-17 01:39:46

  @hoffmanjp 

 

Duh, works great now. Didn't even dawn on me that it was the stupid firewall.

 

Thank you Thank you Thank you!

 

Recommended Solution
  0  
  0  
#3
Options