Hi All,
I have a route based vpn. My peer IP is 198.1.1.1.
Below is the configuration extracted from the firewall.
tunnel.1 is associated with eth3/0 (wan).
From remote network i can access firewall using 136.1.29.1, but none of the 10.0.4.0 network is accessible.
I'm suspecting that it could be due to the NAtting configured on the interface eth3/3, and i suspect that natting should be configured for manage-ip 10.0.4.8 only. Attached is the debug flow basic with sources and destination ffilter as 136.1.1.1.
Can you please suggest on this. This was working earlier where I had not configured Natting and Peer was also different.
I tried pinging from outside to form interesting traffic.
set interface ethernet3/0 ip 132.1.1.10/26
set interface ethernet3/0 route
set interface ethernet3/0 manage-ip 132.1.1.11
set interface ethernet3/0 ip manageable
set interface ethernet3/3 ip 10.0.4.7/28
set interface ethernet3/3 route
set interface ethernet3/3 manage-ip 10.0.4.8
set interface "tunnel.1" mip 136.1.29.1 host 10.0.4.7 netmask 255.255.255.255 vr "trust-vr"
Regards
Rajesh