SETTING SITE TO SITE VPN

[Junior]

Hello everyone 

I need help setting up a site-to-site vpn service. I have two Microtik routers on the front, each on a remote site A and B. The vpn s2s configuration between the two Microtik routers is OK and works correctly. the CP 3600 firewall is behind router A (see diagram). i can ping the ip address of router A's interface from my pc behind the cp, but i can't ping the port of router A's interface that participates in the vpn s2s tunnel with router B. i've created a route in the cp with the GW of the cp's interface that is connected to router A. but the pings to router B don't work. configuration of the GW on the cp: lan destination: 10.254.1.0/24; GW: 192.168.3.1;

thanks you

[AkosBakos]

Hi @Junior 

It is an offtopic, am I right? 🙂  

The CP GWs are not participating as VPN GW-s

However can you ping from PC1 -> Microtik2 10.254.1.1?

What does #ip route get say on the CP3600 for 10.254.1.10?

Akos

[the_rock]

Did you do any packet captures to see where that traffic goes?

Andy