I have two servers:
- Checkpoint Safe@Office 500 with ip x.x.x.x and local network a.a.a.a/24
- Cisco ASA5505 with ip y.y.y.y and local network b.b.b.b/28
Before setting up a vpn I was able to ping y.y.y.y from any machine on a.a.a.a/24.
My issue is that after setting up a vpn between the 2 servers in question I'm no longer able to ping y.y.y.y from a.a.a.a/24. Does anyone know why this might be?
My guess is that a ping to y.y.y.y is needlessly being routed through the vpn tunnel but I'm not sure how to prevent that from happening. Also, if it is going through the vpn then why doesn't the vpn allow it.. a clue to this might be in the asa5505 logs which state:
Group = x.x.x.x, IP = x.x.x.x, Rejecting IPSec tunnel: no matching crypto map entry for remote proxy a.a.a.a/255.255.255.0/0/0 local proxy y.y.y.y/255.255.255.255/0/0 on interface Outside
Once again my issue is that I'm incapable of interpreting this error.