System Tools -> Diagnostics -> Ping do not work on VPN

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
12

System Tools -> Diagnostics -> Ping do not work on VPN

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
System Tools -> Diagnostics -> Ping do not work on VPN
System Tools -> Diagnostics -> Ping do not work on VPN
2023-10-03 21:02:02
Model: ER605 (TL-R605)  
Hardware Version: V2
Firmware Version: 2.1.2 Build 20230210 Rel.62992

The VPN tunnel is working properly but

 

pings (from System Tools -> Diagnostics -> Ping) do not reach devices on the other side of the VPN tunnel.

 

"Block Ping from WAN" is unchecked in firewall.

 

 

  0      
  0      
#1
Options
14 Reply
Re:System Tools -> Diagnostics -> Ping do not work on VPN
2023-10-07 07:59:16
Hi, I wonder what kind of VPN did you use? And what's the destination IP to your ping? The assigned IP or the true IP?
  0  
  0  
#2
Options
Re:System Tools -> Diagnostics -> Ping do not work on VPN
2023-10-14 21:35:37 - last edited 2023-10-14 21:39:47

VPN: IPsec

 

Fist router is: 192.168.1.1

Second router is: 192.168.2.1

 

I can ping from (diagnostic tools) 192.168.1.1 to 192.168.1.20,

but I can not from (diagnostic tools) 192.168.2.1 to 192.168.1.20.

 

---

 

I didn't have this type of problems when I used the same type of vpn on cisco routers (RV042G).

  0  
  0  
#3
Options
Re:System Tools -> Diagnostics -> Ping do not work on VPN
2023-10-17 07:07:44

Hi @sdgf 

Thanks for posting in our business forum.

sdgf wrote

VPN: IPsec

 

Fist router is: 192.168.1.1

Second router is: 192.168.2.1

 

I can ping from (diagnostic tools) 192.168.1.1 to 192.168.1.20,

but I can not from (diagnostic tools) 192.168.2.1 to 192.168.1.20.

 

---

 

I didn't have this type of problems when I used the same type of vpn on cisco routers (RV042G).

I got a question. What if you try the router's default GW IP?

So, you said the tunnel is up, at least you should be able to ping the default GW IP.

 

Need more details about your config if you can share it. The IP area is important to learn and diagnose.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#4
Options
Re:System Tools -> Diagnostics -> Ping do not work on VPN
2023-10-17 23:04:25

IPsec working:

 

1 IPSEC_0 in  192.168.1.0/24 <-- 192.168.2.0/24
2 IPSEC_0 out  192.168.1.0/24 --> 192.168.2.0/24

 

 

When I logged on 192.168.1.1 router and ping to 192.168.1.1

 

PING 192.168.1.1 (192.168.1.1): 64 data bytes
Reply from 192.168.1.1:  bytes=64  ttl=64  seq=1  time=0.532 ms
Reply from 192.168.1.1:  bytes=64  ttl=64  seq=2  time=0.481 ms
Reply from 192.168.1.1:  bytes=64  ttl=64  seq=3  time=0.479 ms
Reply from 192.168.1.1:  bytes=64  ttl=64  seq=4  time=0.542 ms

--- Ping Statistic "192.168.1.1" ---
Packets: Sent=4, Received=4, Lost=0 (0.00% loss)
Round-trip min/avg/max = 0.479/0.508/0.542 ms

 

 

but when I ping to 192.168.2.1

 

PING 192.168.2.1 (192.168.2.1): 64 data bytes
Request timed out!
Request timed out!
Request timed out!
Request timed out!

--- Ping Statistic "192.168.2.1" ---
Packets: Sent=4, Received=0, Lost=4 (100.00% loss)

 

 

When I logged on 192.168.2.1 router and ping to 192.168.2.1

 

PING 192.168.2.1 (192.168.2.1): 64 data bytes
Reply from 192.168.2.1:  bytes=64  ttl=64  seq=1  time=0.493 ms
Reply from 192.168.2.1:  bytes=64  ttl=64  seq=2  time=0.546 ms
Reply from 192.168.2.1:  bytes=64  ttl=64  seq=3  time=0.473 ms
Reply from 192.168.2.1:  bytes=64  ttl=64  seq=4  time=0.458 ms

--- Ping Statistic "192.168.2.1" ---
Packets: Sent=4, Received=4, Lost=0 (0.00% loss)
Round-trip min/avg/max = 0.458/0.492/0.546 ms

 

 

but when I ping to 192.168.1.1

 

PING 192.168.1.1 (192.168.1.1): 64 data bytes
Request timed out!
Request timed out!
Request timed out!
Request timed out!

--- Ping Statistic "192.168.1.1" ---
Packets: Sent=4, Received=0, Lost=4 (100.00% loss)

  0  
  0  
#5
Options
Re:System Tools -> Diagnostics -> Ping do not work on VPN
2023-10-18 01:43:09

Hi @sdgf 

Thanks for posting in our business forum.

Post your config of both sites. Esp these settings.

 

 

Both routers are ER650 V2 2.1.2?  In standalone mode?

And your tunnel screenshot with sensitive info mosaiced.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#6
Options
Re:System Tools -> Diagnostics -> Ping do not work on VPN
2023-10-20 15:35:38 - last edited 2023-10-20 15:46:12

Now, both routers are ER605 V2 2.2.2.

Both standalone mode.

 

192.168.1.1:

 

 

192.168.2.1:

 

 

  0  
  0  
#7
Options
Re:System Tools -> Diagnostics -> Ping do not work on VPN
2023-10-24 03:24:52

Hi @sdgf 

Thanks for posting in our business forum.

sdgf wrote

Now, both routers are ER605 V2 2.2.2.

Both standalone mode.

 

192.168.1.1:

 

 

192.168.2.1:

 

 

 

 

Do you have ACL for this? I am pretty certain that IPsec, site-to-site VPN, should be accessible to each end. But in your case, it is not. Something else must interfere with this.

 

What other settings do you have except for the default and VPN settings?

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#8
Options
Re:System Tools -> Diagnostics -> Ping do not work on VPN
2023-10-24 17:07:16

Advanced VPN options:

 

  0  
  0  
#9
Options
Re:System Tools -> Diagnostics -> Ping do not work on VPN
2023-10-25 17:20:17

When I ping from 192.168.1.100 (desktop, Windows 10) to router 192.168.2.1 everything is OK.

Only diagnostic tool (router, 192.168.1.1) can not send ping to router 192.168.2.1.

  0  
  0  
#10
Options
Re:System Tools -> Diagnostics -> Ping do not work on VPN
2023-10-26 05:41:34

Hi @sdgf 

Thanks for posting in our business forum.

 

Can you give a screenshot of the LAN interface? Would like to see the LAN interface.

Is there any ACL which I asked multiple times?

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#11
Options