Issue with Cross-VLAN Communication over VXLAN/IPSEC between Two Sites

[5q46n2te8jPWJY]

Hello,

I am encountering an issue with my configuration that I am unable to resolve.

I have two sites connected with VXLAN over IPSEC. On each of my sites, I have two VLANs (VLAN 10 and VLAN 20).

Here are my tests:

• SITE A / VLAN 10 successfully pings SITE B / VLAN 10
• SITE A / VLAN 20 successfully pings SITE B / VLAN 20
• SITE A / VLAN 10 successfully pings SITE A / VLAN 20
• SITE A / VLAN 20 successfully pings SITE A / VLAN 10
• SITE B / VLAN 10 successfully pings SITE A / VLAN 10
• SITE B / VLAN 20 successfully pings SITE A / VLAN 20
• SITE B / VLAN 10 successfully pings SITE B / VLAN 20
• SITE B / VLAN 20 successfully pings SITE B / VLAN 10

However,

• SITE A / VLAN 10 cannot ping SITE B / VLAN 20
• SITE A / VLAN 20 cannot ping SITE B / VLAN 10
• SITE B / VLAN 10 cannot ping SITE A / VLAN 20
• SITE B / VLAN 20 cannot ping SITE A / VLAN 10

Do you have any idea why?

Thanks for your help!

[FortiGab]

deduplicate ip address are related to vip IPs i guess

how did u solve?