Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a hub-spoke vpn setup between different locations,


There is ipsec vpn tunnel between Hub-A, and Hub-B, and the connection is fine. However, I can't ping B from A. The connection needs to go through Hub. I'm wondering what settings need to be made for the connection to work?

I tried to use NAT to translate A's address into Hub's but doesn't work.

share|improve this question
Are you using IOS router or ASA? – Bad Dos Aug 9 '12 at 14:31
i'm using IOS. basically I can see A&B from Hub, can see Hub from A, but not B from A. – Daniel Aug 9 '12 at 21:41
it's solved, turns out to be nat rules issue. – Daniel Aug 10 '12 at 12:23
@Daniel you should post what you did to fix it. – evolvd Apr 9 '13 at 21:52

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.