Client VPN cannot see the other end of S2S VPN

EdgarEstrada
Comes here often

Client VPN cannot see the other end of S2S VPN

Client VPN subnet = 10.0.1.0/24

 

Office (meraki) subnet = 10.0.0.0/24 (cisco Meraki MX67W)

 

S2S non-meraki peer VPN between 10.0.0.0/24 and 192.168.20.0/24 (remote) -  both networks work fine. they see each other.

 

10.10.1.X CANNOT see 192.168.20.X

 

Any ideas why it is not working?

 

 

5 Replies 5
ww
Kind of a big deal
Kind of a big deal

Does the other side have a route back to 10.0.1.0/24

EdgarEstrada
Comes here often

the other side is a ClearOS computer inside an esxi.

I have no idea how to do that via iptables.

 

Do you think that should do the trick?

PhilipDAth
Kind of a big deal
Kind of a big deal

Have you included 10.0.1.0/24 in the VPN on your side?  As the remote side included that in the VPN as well?

EdgarEstrada
Comes here often

My side is the Meraki's side -- I tried adding a static route but Meraki's msg says I cannot add a static route using IPs from the VPN Client.

The remote side is an esxi with a gw ClearOS computer.

PhilipDAth
Kind of a big deal
Kind of a big deal

You don't need to add a static route.  Just make sure your client VPN subnet is marked to be included in the VPN.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels