Exciting News! Coming soon, our support community will have a new look and feel. There won't be any changes to your favorite features, but you can look forward to an exciting new experience. Stay tuned for more information!
I am trying to set up a site to site VPN between a pair of Netvanta 3140s but cant seem to get the tunnel up. Routers are named HUB and SPOKE respectively. I have attached the configs for both routers. It is my plan to moved the VPN to the internet, but to simplify things; i am attempting to simply create the VPN tunnel wit the routers physically connected to each other over interface gig 0/3 and using IPs 172.15.16.1 and 172.15.16.1 simulating their public interfaces. I have created loopback interfaces 10.0.1.1 and 1.0.2.1 respectively for local subnet connectivity. Can anyone shed some light on this for me please?
I've only had a quick look, but from what you show you have configured an access list to select packets between LAN subnets, but you have not defined a policy class to allow them through; e.g.:
ip policy-class Private
allow list VPN-10-vpn-selectors stateless
!
ip policy-class Public
allow reverse list VPN-10-vpn-selectors stateless
Also, you do not show a policy class for your loopback or other interfaces (private/public).
I've only had a quick look, but from what you show you have configured an access list to select packets between LAN subnets, but you have not defined a policy class to allow them through; e.g.:
ip policy-class Private
allow list VPN-10-vpn-selectors stateless
!
ip policy-class Public
allow reverse list VPN-10-vpn-selectors stateless
Also, you do not show a policy class for your loopback or other interfaces (private/public).
