Avaya Support Forums  

Go Back   Avaya Support Forums > Avaya Networking Products

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 03-16-2015, 04:24 PM
gordan gordan is offline
Member
 
Join Date: Apr 2011
Posts: 5
gordan has 10 reputation points
Question VPN Avaya SR 2330/4134

Hi all!

I have problem finishing my configuration of VPN over ADSL PPPoE between Avaya SR 4134 (RouterA) and Avaya SR 2330 (Router B). Equipped with VPN cards, Firmware version 10.3.6.0, License SR.

I have configured interfaces: Ethernet LAN/WAN, Tunnel and Virtual-Access.
The GRE tunnel is up and the OSPF builds the routing table.
IKE and IPSEC are configured.

At the moment I can access Internet with both routers and with computers connected on their LAN interfaces.
I can ping the LAN interface on router B from router A and vice versa.

The problem is that I can't access/ping computers that are connected on the other end of the tunnel. I can't ping computers connected on LAN-B from router A or from computers connected on LAN-A and vice versa.

Both configurations are in attach.

Do I need to add a route or same NAT policy, not sure...


Any idea will be appreciated,
Thanks!
Attached Files
File Type: txt AVAYA_SR_4134.txt (3.8 KB, 19 views)
File Type: txt AVAYA_SR_2330.txt (3.8 KB, 23 views)
Reply With Quote
  #2  
Old 03-17-2015, 08:27 AM
gordan gordan is offline
Member
 
Join Date: Apr 2011
Posts: 5
gordan has 10 reputation points
Default

I just removed the LAN and Tunnel interfaces from "Firewall corp" and this solved the problem. Not sure why Internet worked on computers without this change tho...
Reply With Quote
  #3  
Old 04-29-2015, 04:41 AM
gordan gordan is offline
Member
 
Join Date: Apr 2011
Posts: 5
gordan has 10 reputation points
Question Finishing configuration

Hi guys,

After one month configuring I'm almost done. The entire configuration for the VPN is in attach. There is two things I want to ask:

How can I permit the traffic from my network to the remote VPN networks while my LAN interface is in "firewall corp". While my interface "vlan101" is in firewall corp I can access Internet with the NAT policy: policy 1002 out permit address 10.10.139.2 10.10.139.254 any any nat-ip 192.168.139.2 (192.168.139.2 is my WAN interafce that is behind NAT of my ISP ADSL modem) But like this I can't access remote VPN networks (OSPF has populated all the routes to remote networks). However if I remove the "vlan101" interface from "firewall corp" I can access every network trough the VPN but no Internet.

I think it is a policy in the firewall that I miss so my traffic can be permitted trough the tunnel, but I need help with it.

The second thing is to enable SSH access from behind the tunnel.
If I try to SSH access 10.10.139.1 (my LAN address of the "vlan101" interface, there is no problem. But when someone on the other side of the tunnel tries to access via SSH on the same IP, there is a problem.

Any idea is welcome,
Gordan
Attached Files
File Type: txt 2330 config.txt (4.5 KB, 25 views)
Reply With Quote
  #4  
Old 04-29-2015, 05:04 AM
gordan gordan is offline
Member
 
Join Date: Apr 2011
Posts: 5
gordan has 10 reputation points
Default

The SSH access actually works, it was my error in testing.

Now I just need that line in corp firewall that will permit my VPN trafic.
Reply With Quote
Reply

Tags
nortel, pppoe, sr2330, sr4134, vpn

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -7. The time now is 07:33 AM.

This Forum is provided solely for the use and convenience of Avaya customers and partners. Use of the Forum is subject to the Terms and Use and Privacy Statement found at www.avaya.com. No other use is permitted. The Forum including all content posted is “AS IS” and Avaya expressly disclaims all warranties and/or guarantees as to its accuracy, reliability, usefulness, quality or non-infringement of intellectual property. Avaya reserves the right to remove any content posted on the Forum at any time and for whatever reason.

Avaya will not be liable for any content posted on this Forum, including, without limitation, any errors or omissions or for any losses or damages of any kind incurred as a result of use or reliance on any content, regardless of its origin.

You expressly understand and agree that you assume all risks associated with use or reliance on this content.