ipsec vpn connection problem

[jw_jeong]

site to site was configure wth ipsec vpn between br500

ping to other network go well 

but the pc is denied access to other networks

i can not connect to ther server service(http, samba,.. etc) of another network

connect state is green and my firmware version 5.10.0.3

ipsec vpn configure is complete(remote route, remote subnet, remote subnet mask.. local subnet.. local subnet mask and ikev2 set , other option is default )

what settings should be added?

[Retired_Member]

Hello,

Few things:

-Can you ping the gateway of the remote resource?

-What services, devices, are you trying to access on the remote resource?

-Are the devices/services you're trying to access, are they on the subnet list you added when setting up the IPSEC policy?

[jw_jeong]

- i can ping the remote gateway
- i want access NAS and RDP
i recive message using nas web service
err connection reset or err empty response
- local subnet 192.168.10.0
remote subnet 192.168.1.0
local subnet have NAS and PC
i want connect NAS from remote subnet

[MrJoshW]

Hello,

-Do you have a screen shot of the error?

-Are you running either BR500 behind a firewall with a doublenat configuration?

-On the site you are trying to access the resources under, can you setup an apache web host for me and verify if you can access the web page by IP both locally and remotely through the IPSEC tunnel. This can be done on a PC/laptop. I recommend securewamp portable:

http://securewamp.org/en/

[jw_jeong]

vpn connection is success

include net 2 net configure screen shot

[jw_jeong]

192.168.1.0 subnet pc send ping to 192.168.10.0 subnet nas

[jw_jeong]

192.168.10.0 subnet pc send ping to 192.168.1.0 subnet pc

[jw_jeong]

ping is successful, but other services are not accessible.

include http failure screen shot

[MrJoshW]

Hello,

We may need a deeper dive on this issue. I recommend to open a case with support on this. Once you have opened a case, please let me know the case number and I will have it escalated to the proper team to further assist.