Need a little help with a site to site scenario.

[khotaling]

I have this scenario where multiple sites go back to the same datacenter but connect via separate firewalls, and I'm considering this an untangle openvpn issue because on the remote site (172.16.0.0) i can ping to a host in the datacenter (10.200.0.5 for example), but I can't ping from that host back to the remote site. It's like i only have connectivity if the remote site initiates it.

The whole scenario is this:
1. 172.19.1.0, 192.168.0.0, 10.200.0.0, and 10.195.0.0 belong to the same organization.

2. There is a temporary need for access to the 10.200.0.0 and 10.195.0.0 networks from the 172.16.0.0 network for a large data transfer.

I have added 10.200.0.0 and 10.195.0.0 to the exported networks in the openvpn config on 10.250.0.254 and I have added routes on the datacenter routers for any traffic trying to reach 172.16.0.0 to use 10.250.0.254 as the gateway.

What am I missing?

network.png

https://i.imgur.com/P3QyU9X.png

[sky-knight]

Did you export 172.16.0.0 ?

[khotaling]

Ok so this turned out to be the remote site spectrum internet service going down during my testing. I had put the routes into the nexus core during the day and the remote site internet immediately went down so i removed them and it came back up a minute later .... turns out that was just spectrum pulling one over on me. I put the routes back in after hours and everything is functioning as it should. It's been a long two days.

[sky-knight]

Lol, I feel your pain. That's usually how my projects roll.

Also, it's Wednesday... and that's most definitely a Friday problem. My condolences on having to make it through two more days on the fried brain cells.