VPN Between two VM Connections

[Trident]

Hi Guys,

I am trying to setup a VPN between two VM connections, but no luck so far.

Connection A is a 20MB cable BB service

Connection B is a 50MB cable BB service

The thing that I think is causing me issues is I cant seem to get any traffic to go between the two connections. I think this might be because they are both on the same CMTS. So im not sure if VM would block traffic between two connections on the same CMTS?

Here is Connection A tracert

Tracing route to bbc.co.uk [212.58.224.138] over a maximum of 30 hops:

  1     2 ms     2 ms     2 ms  cluster1.gate5.logitech.co.uk [10.13.0.2]
  2    10 ms    11 ms    15 ms  glfd-cmts-05-lback-20.network.virginmedia.net [82.8.176.1]
  3    10 ms     7 ms    16 ms  glfd-core-1a-ge-300-1637.network.virginmedia.net [62.254.207.89]
  4     7 ms    11 ms     8 ms  glfd-bb-1a-ge-200-0.network.virginmedia.net [213.105.175.85]
  5     7 ms    20 ms    10 ms  glfd-bb-1b-ae0-0.network.virginmedia.net [213.105.172.6]
  6     9 ms     7 ms    11 ms  redb-ic-1-as0-0.network.virginmedia.net [62.253.185.78]
  7    10 ms    11 ms    11 ms  212.58.239.249
  8    11 ms    11 ms    15 ms  212.58.238.133
  9    10 ms    15 ms    15 ms  virtual-vip.thdo.bbc.co.uk [212.58.224.138]

Trace complete.

And here is Connection B tracert

Tracing route to bbc.co.uk [212.58.224.138] over a maximum of 30 hops:

  1     3 ms     3 ms     3 ms  cluster2.gate1.logitech.co.uk [192.168.20.2]
  2    13 ms    15 ms    15 ms  glfd-cmts-05-lback-20.network.virginmedia.net [82.8.176.1]
  3    16 ms    13 ms    15 ms  glfd-core-1a-ge-300-1637.network.virginmedia.net [62.254.207.89]
  4    14 ms    15 ms    16 ms  glfd-bb-1a-ge-200-0.network.virginmedia.net [213.105.175.85]
  5    13 ms    15 ms    15 ms  glfd-bb-1b-ae0-0.network.virginmedia.net [213.105.172.6]
  6    15 ms    14 ms    16 ms  redb-ic-1-as0-0.network.virginmedia.net [62.253.185.78]
  7    19 ms    51 ms   214 ms  212.58.239.249
  8    16 ms    15 ms    15 ms  212.58.238.149
  9    16 ms    14 ms    15 ms  virtual-vip.thdo.bbc.co.uk [212.58.224.138]

Trace complete.

As you can see they are both on the same CMTS.

If I try and VPN from B to A I cant see any packets hitting A's firewall, but if I connect from a TalkTalk ADSL connection to A I can establish a VPN.

If I try and ping A from B I cant see any ICMP packets hitting A's firewall either. Again I can see the ICMP traffic if I try and ping A from the ADSL connection.

Any thoughts?

[Peter_]

Try opting out of Advanced Network Error Search on both computers as this can cause issues with VPN.

[Trident]

Ok I have switched that off for both connections, but still wont connect. Would that issue cause ICMP traffic to be dropped?

Pinging ConnectionA [82.8.x.x] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 82.8.x.x:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss)

As above, still no ICMP packets hitting A's firewall from B.

[Peter_]

I am not into VPN so that is all the help I can offer as that is quite often the culprit.

[Trident]

Moldova, thanks anyway!

Anyone else got any ideas?

[MovedGoalPosts]

Dunno specifically about a setup with two Virgin Media connections, but there could be an issue if both are using the same IP range (or something similar). My office an ADSL network with static internet facing IPs had problems with a consultant that needed to VPN for maintenance. Both of us had our internal (LAN) networks on the same IP range of 192.168.16.xxx which was the default. Until one of us changed the IP range VPN connection could be made but that was all that would work.

[Jon T]

If you can't ping either side from the other via their respective WAN IP's then trying to setup a VPN is running before you can walk.

Can you ping both A and B's WAN IP from the talk talk connection?

[Trident]

@ Rob

I don’t think it’s an internal IP routing issue as I can’t even establish the VPN. Also as you can see from the tracert A's internal IP range is 10.13.x.x/16 and B's internal IP range is 192.168.20.x/24, so there is no conflict there.

@ Jon T

Yes both A and B's WAN IP's can be pinged from the TalkTalk connection. Just not between each other. I have got another site, Connection C, and this has a two separate VPN's. One to A and one to B. So I can actually route between A and B but only through C. Unfortunately this is not a workable solution!

On a separate note I do have IPSec enabled on both A and B's LANs for all internal network traffic but this shouldn’t be a problem, but I think it is still worth mentioning. (C also has IPSec enabled and it can establish a VPN to both A and B.)