From users-return-25773-apmail-cloudstack-users-archive=cloudstack.apache.org@cloudstack.apache.org Wed Jun 1 14:41:21 2016 Return-Path: X-Original-To: apmail-cloudstack-users-archive@www.apache.org Delivered-To: apmail-cloudstack-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 8744719FA8 for ; Wed, 1 Jun 2016 14:41:21 +0000 (UTC) Received: (qmail 23861 invoked by uid 500); 1 Jun 2016 14:41:20 -0000 Delivered-To: apmail-cloudstack-users-archive@cloudstack.apache.org Received: (qmail 23805 invoked by uid 500); 1 Jun 2016 14:41:20 -0000 Mailing-List: contact users-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@cloudstack.apache.org Delivered-To: mailing list users@cloudstack.apache.org Received: (qmail 23794 invoked by uid 99); 1 Jun 2016 14:41:20 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 01 Jun 2016 14:41:20 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id E596D1A0511 for ; Wed, 1 Jun 2016 14:41:19 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1 X-Spam-Level: * X-Spam-Status: No, score=1 tagged_above=-999 required=6.31 tests=[KAM_LAZY_DOMAIN_SECURITY=1, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=disabled Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id mgSx1n4rqo8E for ; Wed, 1 Jun 2016 14:41:17 +0000 (UTC) Received: from cerga.lunarpages.com (cerga.lunarpages.com [67.210.123.115]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id 5B1145F4E6 for ; Wed, 1 Jun 2016 14:41:17 +0000 (UTC) Received: from modemcable063.34-80-70.mc.videotron.ca ([70.80.34.63]:64036 helo=Marc-Andres-MacBook-Pro.local) by cerga.lunarpages.com with esmtpsa (TLSv1:DHE-RSA-AES128-SHA:128) (Exim 4.86_1) (envelope-from ) id 1b87KR-0003IC-0B for users@cloudstack.apache.org; Wed, 01 Jun 2016 07:41:03 -0700 Subject: Re: SITE TO SITE VPN ERROR IN OUR ENVIRONMENT with CLOUDSTACK-4.3.1 AND XENSERVER 6.2 To: users@cloudstack.apache.org References: <005201d1bc0b$e04b7a00$a0e26e00$@gmail.com> From: Marc-Andre Jutras Message-ID: <47799d5f-673d-a405-7d74-00fda797f6e3@marcuspocus.com> Date: Wed, 1 Jun 2016 10:40:53 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.1.0 MIME-Version: 1.0 In-Reply-To: <005201d1bc0b$e04b7a00$a0e26e00$@gmail.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - cerga.lunarpages.com X-AntiAbuse: Original Domain - cloudstack.apache.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - marcuspocus.com X-Get-Message-Sender-Via: cerga.lunarpages.com: authenticated_id: marcus@marcuspocus.com X-Authenticated-Sender: cerga.lunarpages.com: marcus@marcuspocus.com Hi Venkat, You can also check on your VPC if there's any IPSEC negociation errors there... log on your VPC and check in : /var/log/cloud.log /var/log/daemon.log Marcus On 2016-06-01 9:45 AM, Timothy Lothering wrote: > Hi Venkat, > > IPSEC VPN is established with the VPC (in your case the /16). Your Tier > (/24) is in this supernet, so you should be able to route to it once the > tunnel is up. > > Make sure to specify the supernet (/16) on the remote VPN appliance as the > destination. > > > > -----Original Message----- > From: Venkat Boggarapu [mailto:venkat.b@axiomio.com] > Sent: Wednesday, 01 June 2016 2:50 PM > To: users@cloudstack.apache.org > Subject: SITE TO SITE VPN ERROR IN OUR ENVIRONMENT with CLOUDSTACK-4.3.1 AND > XENSERVER 6.2 > > Hi Team, > > In our environment we are using cloudstack-4.3.1 and xenserver 6.2 > > We have created VPC router with SUPER-CIDR value as X.X.X.X/16. > > After creating VPC router, created a new TIER with X.X.X.X/24 with the same > network, gateway. > > Finally we are unable to configure the IPSEC with the X.X.X.X/24, but we > have successful configured IPSEC with X.X.X.X/16. > > Please help me guys, I was wonder why it's working with SUPER-CDIR > (X.X.X.X/16) with IPSEC. > > Thanks, > Venkat Boggarapu > >