<![CDATA[Routing 1 site-to-wite vpn to another]]>I have 3 sites with the following local subnets:

Site A 10.100.40.0/24
Site B 10.100.59.0/24
Site C 10.100.56.0/24

Sites B & C connect to site A via a routed VTI site-to-site IPSEC VPN
Sites B & C can access hosts on site A through the VPN just fine.

Here is my problem;
Site A has a Site to Site IPSEC vpn to a vendor with subnet 192.158.24.0/24 and I can ping hosts on that network from site A, no problem.
The problem is I cannot ping hosts on the Vendor's site from sites B or C.
When I created the VPN to the Vendor from site A, I created 3 phase 2 tunnel entries, one for the Site A network and two more for the Site B and Site C networks.
When i do a tracert from a computer on site B to an IP on the Vendor's network, it passes the traffic through the routed VTI vpn to the VTI gateway address on Site A successfully and dies there.

Any help getting this working would be GREATLY appreciated!

]]>https://forum.netgate.com/topic/189773/routing-1-site-to-wite-vpn-to-anotherRSS for NodeWed, 15 Jul 2026 19:58:43 GMTThu, 22 Aug 2024 20:49:57 GMT60<![CDATA[Reply to Routing 1 site-to-wite vpn to another on Fri, 04 Oct 2024 12:55:07 GMT]]>Here is the log informatin I get when trying to ping from one of hte remote sites:

Oct 4 08:53:19 charon 80307 12[KNL] <con3|370> querying policy 0.0.0.0/0|/0 === 0.0.0.0/0|/0 in failed, not found
Oct 4 08:53:19 charon 80307 12[KNL] <con3|370> querying policy ::/0|/0 === ::/0|/0 in failed, not found
Oct 4 08:53:19 charon 80307 12[IKE] <con3|370> sending DPD request
Oct 4 08:53:19 charon 80307 12[IKE] <con3|370> queueing IKE_DPD task
Oct 4 08:53:19 charon 80307 12[IKE] <con3|370> activating new tasks
Oct 4 08:53:19 charon 80307 12[IKE] <con3|370> activating IKE_DPD task
Oct 4 08:53:19 charon 80307 12[ENC] <con3|370> generating INFORMATIONAL request 2250 [ ]
Oct 4 08:53:19 charon 80307 12[NET] <con3|370> sending packet: from 50.169.69.234[500] to 50.169.69.203[500] (80 bytes)
Oct 4 08:53:19 charon 80307 12[NET] <con3|370> received packet: from 50.169.69.203[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:19 charon 80307 12[ENC] <con3|370> parsed INFORMATIONAL response 2250 [ ]
Oct 4 08:53:19 charon 80307 12[IKE] <con3|370> activating new tasks
Oct 4 08:53:19 charon 80307 12[IKE] <con3|370> nothing to initiate
Oct 4 08:53:22 charon 80307 12[NET] <con1|366> received packet: from 66.207.143.1[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:22 charon 80307 12[ENC] <con1|366> parsed INFORMATIONAL request 12680 [ ]
Oct 4 08:53:22 charon 80307 12[ENC] <con1|366> generating INFORMATIONAL response 12680 [ ]
Oct 4 08:53:22 charon 80307 12[NET] <con1|366> sending packet: from 50.169.69.234[500] to 66.207.143.1[500] (80 bytes)
Oct 4 08:53:22 charon 80307 12[KNL] <con2|371> querying policy 0.0.0.0/0|/0 === 0.0.0.0/0|/0 in failed, not found
Oct 4 08:53:22 charon 80307 12[KNL] <con2|371> querying policy ::/0|/0 === ::/0|/0 in failed, not found
Oct 4 08:53:22 charon 80307 12[IKE] <con2|371> sending DPD request
Oct 4 08:53:22 charon 80307 12[IKE] <con2|371> queueing IKE_DPD task
Oct 4 08:53:22 charon 80307 12[IKE] <con2|371> activating new tasks
Oct 4 08:53:22 charon 80307 12[IKE] <con2|371> activating IKE_DPD task
Oct 4 08:53:22 charon 80307 12[ENC] <con2|371> generating INFORMATIONAL request 1086 [ ]
Oct 4 08:53:22 charon 80307 12[NET] <con2|371> sending packet: from 50.169.69.234[500] to 50.169.69.219[500] (80 bytes)
Oct 4 08:53:22 charon 80307 12[NET] <con2|371> received packet: from 50.169.69.219[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:22 charon 80307 12[ENC] <con2|371> parsed INFORMATIONAL response 1086 [ ]
Oct 4 08:53:22 charon 80307 12[IKE] <con2|371> activating new tasks
Oct 4 08:53:22 charon 80307 12[IKE] <con2|371> nothing to initiate
Oct 4 08:53:27 charon 80307 11[IKE] <con4|372> sending DPD request
Oct 4 08:53:27 charon 80307 11[IKE] <con4|372> queueing IKE_DPD task
Oct 4 08:53:27 charon 80307 11[IKE] <con4|372> activating new tasks
Oct 4 08:53:27 charon 80307 11[IKE] <con4|372> activating IKE_DPD task
Oct 4 08:53:27 charon 80307 11[ENC] <con4|372> generating INFORMATIONAL request 93 [ ]
Oct 4 08:53:27 charon 80307 11[NET] <con4|372> sending packet: from 50.169.69.234[500] to 192.158.19.11[500] (80 bytes)
Oct 4 08:53:27 charon 80307 11[NET] <con1|366> received packet: from 66.207.143.1[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:27 charon 80307 11[ENC] <con1|366> parsed INFORMATIONAL request 12681 [ ]
Oct 4 08:53:27 charon 80307 11[ENC] <con1|366> generating INFORMATIONAL response 12681 [ ]
Oct 4 08:53:27 charon 80307 11[NET] <con1|366> sending packet: from 50.169.69.234[500] to 66.207.143.1[500] (80 bytes)
Oct 4 08:53:27 charon 80307 11[NET] <con4|372> received packet: from 192.158.19.11[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:27 charon 80307 11[ENC] <con4|372> parsed INFORMATIONAL response 93 [ ]
Oct 4 08:53:27 charon 80307 11[IKE] <con4|372> activating new tasks
Oct 4 08:53:27 charon 80307 11[IKE] <con4|372> nothing to initiate
Oct 4 08:53:29 charon 80307 11[KNL] <con3|370> querying policy 0.0.0.0/0|/0 === 0.0.0.0/0|/0 in failed, not found
Oct 4 08:53:29 charon 80307 11[KNL] <con3|370> querying policy ::/0|/0 === ::/0|/0 in failed, not found
Oct 4 08:53:29 charon 80307 11[IKE] <con3|370> sending DPD request
Oct 4 08:53:29 charon 80307 11[IKE] <con3|370> queueing IKE_DPD task
Oct 4 08:53:29 charon 80307 11[IKE] <con3|370> activating new tasks
Oct 4 08:53:29 charon 80307 11[IKE] <con3|370> activating IKE_DPD task
Oct 4 08:53:29 charon 80307 11[ENC] <con3|370> generating INFORMATIONAL request 2251 [ ]
Oct 4 08:53:29 charon 80307 11[NET] <con3|370> sending packet: from 50.169.69.234[500] to 50.169.69.203[500] (80 bytes)
Oct 4 08:53:29 charon 80307 11[NET] <con3|370> received packet: from 50.169.69.203[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:29 charon 80307 11[ENC] <con3|370> parsed INFORMATIONAL response 2251 [ ]
Oct 4 08:53:29 charon 80307 11[IKE] <con3|370> activating new tasks
Oct 4 08:53:29 charon 80307 11[IKE] <con3|370> nothing to initiate
Oct 4 08:53:32 charon 80307 11[NET] <con1|366> received packet: from 66.207.143.1[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:32 charon 80307 11[ENC] <con1|366> parsed INFORMATIONAL request 12682 [ ]
Oct 4 08:53:32 charon 80307 11[ENC] <con1|366> generating INFORMATIONAL response 12682 [ ]
Oct 4 08:53:32 charon 80307 11[NET] <con1|366> sending packet: from 50.169.69.234[500] to 66.207.143.1[500] (80 bytes)
Oct 4 08:53:32 charon 80307 11[KNL] <con2|371> querying policy 0.0.0.0/0|/0 === 0.0.0.0/0|/0 in failed, not found
Oct 4 08:53:32 charon 80307 11[KNL] <con2|371> querying policy ::/0|/0 === ::/0|/0 in failed, not found
Oct 4 08:53:32 charon 80307 11[IKE] <con2|371> sending DPD request
Oct 4 08:53:32 charon 80307 11[IKE] <con2|371> queueing IKE_DPD task
Oct 4 08:53:32 charon 80307 11[IKE] <con2|371> activating new tasks
Oct 4 08:53:32 charon 80307 11[IKE] <con2|371> activating IKE_DPD task
Oct 4 08:53:32 charon 80307 11[ENC] <con2|371> generating INFORMATIONAL request 1087 [ ]
Oct 4 08:53:32 charon 80307 11[NET] <con2|371> sending packet: from 50.169.69.234[500] to 50.169.69.219[500] (80 bytes)
Oct 4 08:53:32 charon 80307 11[NET] <con2|371> received packet: from 50.169.69.219[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:32 charon 80307 11[ENC] <con2|371> parsed INFORMATIONAL response 1087 [ ]
Oct 4 08:53:32 charon 80307 11[IKE] <con2|371> activating new tasks
Oct 4 08:53:32 charon 80307 11[IKE] <con2|371> nothing to initiate
Oct 4 08:53:37 charon 80307 11[IKE] <con4|372> sending DPD request
Oct 4 08:53:37 charon 80307 11[IKE] <con4|372> queueing IKE_DPD task
Oct 4 08:53:37 charon 80307 11[IKE] <con4|372> activating new tasks
Oct 4 08:53:37 charon 80307 11[IKE] <con4|372> activating IKE_DPD task
Oct 4 08:53:37 charon 80307 11[ENC] <con4|372> generating INFORMATIONAL request 94 [ ]
Oct 4 08:53:37 charon 80307 11[NET] <con4|372> sending packet: from 50.169.69.234[500] to 192.158.19.11[500] (80 bytes)
Oct 4 08:53:37 charon 80307 09[NET] <con1|366> received packet: from 66.207.143.1[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:37 charon 80307 09[ENC] <con1|366> parsed INFORMATIONAL request 12683 [ ]
Oct 4 08:53:37 charon 80307 09[ENC] <con1|366> generating INFORMATIONAL response 12683 [ ]
Oct 4 08:53:37 charon 80307 09[NET] <con1|366> sending packet: from 50.169.69.234[500] to 66.207.143.1[500] (80 bytes)
Oct 4 08:53:37 charon 80307 09[NET] <con4|372> received packet: from 192.158.19.11[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:37 charon 80307 09[ENC] <con4|372> parsed INFORMATIONAL response 94 [ ]
Oct 4 08:53:37 charon 80307 09[IKE] <con4|372> activating new tasks
Oct 4 08:53:37 charon 80307 09[IKE] <con4|372> nothing to initiate
Oct 4 08:53:39 charon 80307 09[KNL] <con3|370> querying policy 0.0.0.0/0|/0 === 0.0.0.0/0|/0 in failed, not found
Oct 4 08:53:39 charon 80307 09[KNL] <con3|370> querying policy ::/0|/0 === ::/0|/0 in failed, not found
Oct 4 08:53:39 charon 80307 09[IKE] <con3|370> sending DPD request
Oct 4 08:53:39 charon 80307 09[IKE] <con3|370> queueing IKE_DPD task
Oct 4 08:53:39 charon 80307 09[IKE] <con3|370> activating new tasks
Oct 4 08:53:39 charon 80307 09[IKE] <con3|370> activating IKE_DPD task
Oct 4 08:53:39 charon 80307 09[ENC] <con3|370> generating INFORMATIONAL request 2252 [ ]
Oct 4 08:53:39 charon 80307 09[NET] <con3|370> sending packet: from 50.169.69.234[500] to 50.169.69.203[500] (80 bytes)
Oct 4 08:53:39 charon 80307 09[NET] <con3|370> received packet: from 50.169.69.203[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:39 charon 80307 09[ENC] <con3|370> parsed INFORMATIONAL response 2252 [ ]
Oct 4 08:53:39 charon 80307 09[IKE] <con3|370> activating new tasks
Oct 4 08:53:39 charon 80307 09[IKE] <con3|370> nothing to initiate
Oct 4 08:53:42 charon 80307 09[NET] <con1|366> received packet: from 66.207.143.1[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:42 charon 80307 09[ENC] <con1|366> parsed INFORMATIONAL request 12684 [ ]
Oct 4 08:53:42 charon 80307 09[ENC] <con1|366> generating INFORMATIONAL response 12684 [ ]
Oct 4 08:53:42 charon 80307 09[NET] <con1|366> sending packet: from 50.169.69.234[500] to 66.207.143.1[500] (80 bytes)
Oct 4 08:53:42 charon 80307 09[KNL] <con2|371> querying policy 0.0.0.0/0|/0 === 0.0.0.0/0|/0 in failed, not found
Oct 4 08:53:42 charon 80307 09[KNL] <con2|371> querying policy ::/0|/0 === ::/0|/0 in failed, not found
Oct 4 08:53:42 charon 80307 09[IKE] <con2|371> sending DPD request
Oct 4 08:53:42 charon 80307 09[IKE] <con2|371> queueing IKE_DPD task
Oct 4 08:53:42 charon 80307 09[IKE] <con2|371> activating new tasks
Oct 4 08:53:42 charon 80307 09[IKE] <con2|371> activating IKE_DPD task
Oct 4 08:53:42 charon 80307 09[ENC] <con2|371> generating INFORMATIONAL request 1088 [ ]
Oct 4 08:53:42 charon 80307 09[NET] <con2|371> sending packet: from 50.169.69.234[500] to 50.169.69.219[500] (80 bytes)
Oct 4 08:53:42 charon 80307 09[NET] <con2|371> received packet: from 50.169.69.219[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:42 charon 80307 09[ENC] <con2|371> parsed INFORMATIONAL response 1088 [ ]
Oct 4 08:53:42 charon 80307 09[IKE] <con2|371> activating new tasks
Oct 4 08:53:42 charon 80307 09[IKE] <con2|371> nothing to initiate
Oct 4 08:53:47 charon 80307 09[IKE] <con4|372> sending DPD request
Oct 4 08:53:47 charon 80307 09[IKE] <con4|372> queueing IKE_DPD task
Oct 4 08:53:47 charon 80307 09[IKE] <con4|372> activating new tasks
Oct 4 08:53:47 charon 80307 09[IKE] <con4|372> activating IKE_DPD task
Oct 4 08:53:47 charon 80307 09[ENC] <con4|372> generating INFORMATIONAL request 95 [ ]
Oct 4 08:53:47 charon 80307 09[NET] <con4|372> sending packet: from 50.169.69.234[500] to 192.158.19.11[500] (80 bytes)
Oct 4 08:53:47 charon 80307 09[NET] <con1|366> received packet: from 66.207.143.1[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:47 charon 80307 09[ENC] <con1|366> parsed INFORMATIONAL request 12685 [ ]
Oct 4 08:53:47 charon 80307 09[ENC] <con1|366> generating INFORMATIONAL response 12685 [ ]
Oct 4 08:53:47 charon 80307 09[NET] <con1|366> sending packet: from 50.169.69.234[500] to 66.207.143.1[500] (80 bytes)
Oct 4 08:53:47 charon 80307 09[NET] <con4|372> received packet: from 192.158.19.11[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:47 charon 80307 09[ENC] <con4|372> parsed INFORMATIONAL response 95 [ ]
Oct 4 08:53:47 charon 80307 09[IKE] <con4|372> activating new tasks
Oct 4 08:53:47 charon 80307 09[IKE] <con4|372> nothing to initiate
Oct 4 08:53:49 charon 80307 09[KNL] <con3|370> querying policy 0.0.0.0/0|/0 === 0.0.0.0/0|/0 in failed, not found
Oct 4 08:53:49 charon 80307 09[KNL] <con3|370> querying policy ::/0|/0 === ::/0|/0 in failed, not found
Oct 4 08:53:49 charon 80307 09[IKE] <con3|370> sending DPD request
Oct 4 08:53:49 charon 80307 09[IKE] <con3|370> queueing IKE_DPD task
Oct 4 08:53:49 charon 80307 09[IKE] <con3|370> activating new tasks
Oct 4 08:53:49 charon 80307 09[IKE] <con3|370> activating IKE_DPD task
Oct 4 08:53:49 charon 80307 09[ENC] <con3|370> generating INFORMATIONAL request 2253 [ ]
Oct 4 08:53:49 charon 80307 09[NET] <con3|370> sending packet: from 50.169.69.234[500] to 50.169.69.203[500] (80 bytes)
Oct 4 08:53:49 charon 80307 10[NET] <con3|370> received packet: from 50.169.69.203[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:49 charon 80307 10[ENC] <con3|370> parsed INFORMATIONAL response 2253 [ ]
Oct 4 08:53:49 charon 80307 10[IKE] <con3|370> activating new tasks
Oct 4 08:53:49 charon 80307 10[IKE] <con3|370> nothing to initiate
Oct 4 08:53:52 charon 80307 10[NET] <con1|366> received packet: from 66.207.143.1[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:52 charon 80307 10[ENC] <con1|366> parsed INFORMATIONAL request 12686 [ ]
Oct 4 08:53:52 charon 80307 10[ENC] <con1|366> generating INFORMATIONAL response 12686 [ ]
Oct 4 08:53:52 charon 80307 10[NET] <con1|366> sending packet: from 50.169.69.234[500] to 66.207.143.1[500] (80 bytes)
Oct 4 08:53:52 charon 80307 10[KNL] <con2|371> querying policy 0.0.0.0/0|/0 === 0.0.0.0/0|/0 in failed, not found
Oct 4 08:53:52 charon 80307 10[KNL] <con2|371> querying policy ::/0|/0 === ::/0|/0 in failed, not found
Oct 4 08:53:52 charon 80307 10[IKE] <con2|371> sending DPD request
Oct 4 08:53:52 charon 80307 10[IKE] <con2|371> queueing IKE_DPD task
Oct 4 08:53:52 charon 80307 10[IKE] <con2|371> activating new tasks
Oct 4 08:53:52 charon 80307 10[IKE] <con2|371> activating IKE_DPD task
Oct 4 08:53:52 charon 80307 10[ENC] <con2|371> generating INFORMATIONAL request 1089 [ ]
Oct 4 08:53:52 charon 80307 10[NET] <con2|371> sending packet: from 50.169.69.234[500] to 50.169.69.219[500] (80 bytes)
Oct 4 08:53:52 charon 80307 10[NET] <con2|371> received packet: from 50.169.69.219[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:52 charon 80307 10[ENC] <con2|371> parsed INFORMATIONAL response 1089 [ ]
Oct 4 08:53:52 charon 80307 10[IKE] <con2|371> activating new tasks
Oct 4 08:53:52 charon 80307 10[IKE] <con2|371> nothing to initiate
Oct 4 08:53:57 charon 80307 10[IKE] <con4|372> sending DPD request
Oct 4 08:53:57 charon 80307 10[IKE] <con4|372> queueing IKE_DPD task
Oct 4 08:53:57 charon 80307 10[IKE] <con4|372> activating new tasks
Oct 4 08:53:57 charon 80307 10[IKE] <con4|372> activating IKE_DPD task
Oct 4 08:53:57 charon 80307 10[ENC] <con4|372> generating INFORMATIONAL request 96 [ ]
Oct 4 08:53:57 charon 80307 10[NET] <con4|372> sending packet: from 50.169.69.234[500] to 192.158.19.11[500] (80 bytes)
Oct 4 08:53:57 charon 80307 10[NET] <con1|366> received packet: from 66.207.143.1[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:57 charon 80307 10[ENC] <con1|366> parsed INFORMATIONAL request 12687 [ ]
Oct 4 08:53:57 charon 80307 10[ENC] <con1|366> generating INFORMATIONAL response 12687 [ ]
Oct 4 08:53:57 charon 80307 10[NET] <con1|366> sending packet: from 50.169.69.234[500] to 66.207.143.1[500] (80 bytes)
Oct 4 08:53:57 charon 80307 10[NET] <con4|372> received packet: from 192.158.19.11[500] to 50.169.69.234[500] (80 bytes)
Oct 4 08:53:57 charon 80307 10[ENC] <con4|372> parsed INFORMATIONAL response 96 [ ]
Oct 4 08:53:57 charon 80307 10[IKE] <con4|372> activating new tasks
Oct 4 08:53:57 charon 80307 10[IKE] <con4|372> nothing to initiate

]]>https://forum.netgate.com/post/1187015https://forum.netgate.com/post/1187015Fri, 04 Oct 2024 12:55:07 GMT<![CDATA[Reply to Routing 1 site-to-wite vpn to another on Wed, 28 Aug 2024 18:32:29 GMT]]>@datacare
Check Status > IPSec. Are all phase 2 shown up as connected there?

You can also check the IPSec logs for hints on this issue.

]]>https://forum.netgate.com/post/1182401https://forum.netgate.com/post/1182401Wed, 28 Aug 2024 18:32:29 GMT<![CDATA[Reply to Routing 1 site-to-wite vpn to another on Wed, 28 Aug 2024 17:20:05 GMT]]>As far as I know yes. However, they are doing something more restrictive on their end with NAT also. I have thrown the ball back in their court on this for now but still would like to make sure I haven't missed anything on my end.

]]>https://forum.netgate.com/post/1182380https://forum.netgate.com/post/1182380Wed, 28 Aug 2024 17:20:05 GMT<![CDATA[Reply to Routing 1 site-to-wite vpn to another on Wed, 28 Aug 2024 11:30:42 GMT]]>@datacare said in Routing 1 site-to-wite vpn to another:

When I created the VPN to the Vendor from site A, I created 3 phase 2 tunnel entries, one for the Site A network and two more for the Site B and Site C networks.

Are these tunnels configured on the vendors endpoint as well?

]]>https://forum.netgate.com/post/1182323https://forum.netgate.com/post/1182323Wed, 28 Aug 2024 11:30:42 GMT