Remote VPN Ipsec Tunnel not reachable from mobile clients

[trasher mx]

Hi Guys,

Im quite new in ipsec tunnels and stuff, so for now i created a tunnel ipsec between two locations local-net(192.168.11.0/24) and remote-net (172.16.0.0/16).
So far, no issues everything working fine.

After that i had to create mobile users, using openvpn same, no issues, the problem is when the mobile users tries to reach one of the remote address at remote-net (172.16.0.0/16) they are not able to, if they try with local-net (192.168.11.0/24). no issues.

Can anyone help me with this?

Thanks in advance.

[Konstanti]

@trasher-mx
Hi,
perhaps you need to create additional phase 2 in ipsec tunnel settings with traffic selectors
172.16.0.0/16<-> 192.168.12.0/24 (on both sides of the tunnel)

[trasher mx]

Hi, @Konstanti

I've already did it but didnt work

[Konstanti]

@trasher-mx
Then you need to show / check the phase 2 settings on both sides of the tunnel
and show/check the rules on the openvpn interface
Or using tcpdump to find the place where the packets are blocked