Cisco VPN 3000 Bedienungsanleitung PDF herunterladen (Seite 22)

Cisco VPN 3000 Series Concentrators Interoperability Profile

Troubleshooting

• In the IPSec | LAN-to-LAN | Add screen (see Figure 12) be sure to enter network addresses, not host

addresses, in the Local Network IP Address and Remote Network IP Address fields.

• In the IPSec | LAN-to-LAN | Add screen (see Figure 12) be sure to enter wildcard masks, not subnet

masks, in the Local Network IP Address and Remote Network IP Address fields. A wildcard mask

is the reverse of a subnet mask: it has ones in bit positions to ignore, and zeros in bit positions to

match. For example, a subnet mask of 255.255.255.0 converts to a wildcard mask of 0.0.0.255.

Testing Connectivity

Internet Connectivity

PING from the public (WAN) interface of the origin gateway to the public interface of the destination

gateway to test whether there is a problem on the Internet. In the Concentrator Manager drop-down table

of contents, click Administration > Ping. The Ping screen displays.

Figure 17 Administration | Ping Screen

Enter the IP address of the public interface for the destination gateway and press Ping. The VPN

Concentrator returns a Success message if the it can contact the IP address you entered. If it cannot, it

displays an error screen.

Figure 18 Success Screen

SA Connectivity

PING from the private (inside) interface of the origin gateway to the inside interface of the destination

gateway to test whether there is a problem setting up the SAs. Do this from a PC behind the private

interface of the VPN Concentrator.

1 2 ... 17 18 19 20 21 22 23 24 25

Keine Kommentare

Cisco VPN 3000 Bedienungsanleitung Seite 22