1

I am dealing with a problem with Netscreen VPN.

Topology is basically

Server Side ーー> (Agg2)Trust/Untrust(Agg1)ーー> ーー> Remote Office (Yamaha)

100.66.xx.0/24 ーー> Netscreen VPN ーー> Internet ーー> 100.71.YY.0/24

Proxy id is the same with source and destination range.

Tunnel is in Untrust zone and unnumbered to aggregate1.

VPN is connected successfully and I can ping from our server side L3 switches to other side servers (I cannot try data transmission, because servers are not built yet.). But because of the monitoring VPN is giving UP/DOWN alert in every 100 seconds. so I tried to create a loopback with 100.66.xx.253/32 and tried to use it as source for monitoring.

set vpn monitor source-interface loopback.1 destination-ip 100.71.YY.253 optimized rekey

But it is failing. I tried to ping from loopback.1 to other side of the VPN, but I couldn't. There is no routing missmatch. Tunnel and loopback are in both Untrust zone. loopback address is in the same range with proxy-id. Policy is already allowing Proxy-id source range to proxy-id destination range. I couldn't understand the problem at all.

What do we need to do to ping from loopback to VPN destination through tunnel?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.