Skip to main content
chilun
New Member
October 25, 2018
Question

IPsec VPN and Policy Route

  • October 25, 2018
  • 1 reply
  • 3481 views

Hi all,

I have two offices connected by a Metro Ethernet with their LAN subnet itself, and both have their broadband access itself. The internal routing between these two sites is through Cisco router which provided by ISP. All servers are located at the main office.

Recently, I have deployed a backup server at the main office and a DR server at the remote office, then I built up an route based IPSec VPN between these two locations for the backup replication. I want these two servers can be connected by VPN instead of the Metro Ethernet. I configured policy route for both side but not working. Can anyone help?

 

    1 reply

    Bubu
    New Member
    October 25, 2018

    Hi,

    Can you give us more info please?

    Is the tunnel UP?

    Tunnel is up but traffic does not go through?

     

    diagnose vpn ike gateway list         ->   to check if you are initiator or responder (the next steps, you must perform them on the responder side)

    diagnose vpn ike log-filter clear

    diagnose vpn ike log-filter name <PHASE1_NAME_HERE>

    diagnose debug application ike -1

    diagnose debug enable

     

    And try to bring up.

    You can now analyze the error and solve the problem or send me the debug output.

     

    BR

     

     

    chilun
    chilunAuthor
    New Member
    October 25, 2018

    The tunnel is up. Previously, the VPN tunnel used to handle routing between this two office.

    After installed Metro Ethernet, I keep the VPN tunnel for standby.