Answer the question
In order to leave comments, you need to log in
How to ping PC from network behind d-link DSR-500 device to PC behind d-link dfl-210 device via ipsec?
PC1 (192.168.12.161) behind d-link firewall DSR 500 (192.168.12.231)
PC2 (192.168.100.121) behind d-link firewall DFL 210 (192.168.100.1)
Between ipsec is configured, PC2 pings both PC1 and DSR 500, with PC1 pings DFL 210 and does not ping PC2
Ip rules configured ping_all Allow any all-nets any all-nets all_icmp
In
DFL
210 logs
I
get
an
error 100.121
ttl_low
drop
_
rev=1 ttl=2 ttlmin=3 ipdatalen=72 icmptype=ECHO_REQUEST echoid=1 echoseq=2268
2022-10-07
21:00:57
Warning IP_PROTO 07000014
TTLOnLow
ICMP test
192.168.12.161
192.168.100.12
dropl tt
= 192.168.100.12 =2 ttlmin=3 ipdatalen=72 icmptype=ECHO_REQUEST echoid=1 echoseq=2267
2022-10-07
21:00:53 Warning IP_PROTO
07000014 TTLOnLow ICMP test
192.168.12.161
192.168.100.121
ttl_low
drop
rev2 ltt=3 ipdatalen=72 icmptype=ECHO_REQUEST echoid=1 echoseq=2266
2022-10-07
21:00:49 Warning IP_PROTO
07000014 ICMP test TTLOnLow
192.168.12.161
192.168.100.121
ttl_low
drop
rev = 1 ttl = 1 ttlmin = 3 ipdatalen = 72 icmptype = ECHO_REQUEST echoid = 1 echoseq = 2265
2022-10-07
21:00:45 Warning IP_PROTO
07000014 ICMP test
TTLOnLow 192,168 .12.161
192.168.100.121
ttl_low
drop
rev = 1 ttl = 1 ttlmin = 3 ipdatalen = 72 icmptype = ECHO_REQUEST echoid = 1 echoseq = 2264
2022-10-07
21:00:41 Warning IP_PROTO
07000014 ICMP test TTLOnLow
192.168.12.161
192.168.100.121
ttl_low
drop
_______________________________________________________________________________________________
If all icmp are allowed what am I doing wrong?
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question