Business Community > Routers > TL-ER6020 VPN (ipsec) - can't see all computers in lan
< Routers

TL-ER6020 VPN (ipsec) - can't see all computers in lan

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

TL-ER6020 VPN (ipsec) - can't see all computers in lan

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
TL-ER6020 VPN (ipsec) - can't see all computers in lan
TL-ER6020 VPN (ipsec) - can't see all computers in lan
2024-02-12 13:38:51 - last edited 2024-02-23 02:51:23
Model: TL-ER6020  
Hardware Version: V2
Firmware Version: 2.0.3 Build 20200623 Rel.39031

I have two TL-ER6020 routers, they are connected via a built-in ipsec lan-to-lan VPN. One has the subnet 192.168.10.xxx, the other 192.168.1.xxx. The problem is that not all computers can see each other. (VNC, RDP, Ping etc.). The most important computers/servers have permanently assigned addresses (MAC -> IP), the DHCP server is running. Do you have any idea where to start looking for the problem? If you need additional information, I will provide it. Thanks in advance for the hints.

  0      
 
  0      
 
#1
Options
1 Accepted Solution
Re:TL-ER6020 VPN (ipsec) - can't see all computers in lan-Solution
2024-02-18 02:53:11 - last edited 2024-02-23 02:51:23

Hi @Bangiel 

Thanks for posting in our business forum.

1. Examine your firewall on the computers.

2. Try ping on and test if the IPsec is working or not.

3. IPsec does not work in Network Discovery. That requires NetBIOS feature. So the VPN tunnel does not help you forward that. Note this.

If ping works, that means VPN works as well as the firewall is not blocking and you should access them well.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
Recommended Solution
  1  
  1  
#3
Options
2 Reply
Re:TL-ER6020 VPN (ipsec) - can't see all computers in lan
2024-02-12 14:39:54

  @Bangiel 

 

Can you ping IPs in one subnet from IPs in the other?  If so, at least your routing is good.

 

If your application depends on broadcast traffic to 'announce' services, such as Bonjour, then it's likely that your tunnel is not fowarding this type of traffic.

I would suggest setting up a local DNS server (like PiHole) with the required IP->name mappings for both sides, and you configure clients on both ends to use that for DNS resolution.  You should then be able to access services on either end by name at least, but you still won't 'see' them in any kind of 'network neighbourhood'.

<< Boycotting this site and these products until CANADIAN firmwares get some love >>
  0  
  0  
#2
Options
Re:TL-ER6020 VPN (ipsec) - can't see all computers in lan-Solution
2024-02-18 02:53:11 - last edited 2024-02-23 02:51:23

Hi @Bangiel 

Thanks for posting in our business forum.

1. Examine your firewall on the computers.

2. Try ping on and test if the IPsec is working or not.

3. IPsec does not work in Network Discovery. That requires NetBIOS feature. So the VPN tunnel does not help you forward that. Note this.

If ping works, that means VPN works as well as the firewall is not blocking and you should access them well.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
Recommended Solution
  1  
  1  
#3
Options

Information

Helpful: 0

Views: 588

Replies: 2

About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.