Wired Intelligent Edge

 View Only
Back to discussions
Expand all | Collapse all

OSPF over Site to Site VPN (HPE5700 and Aruba 2930F)

This thread has been viewed 10 times

  • 1.  OSPF over Site to Site VPN (HPE5700 and Aruba 2930F)

    Posted Feb 10, 2022 06:24 PM
    I am having some trouble with a Site to Site VPN and using OSPF... It might be something simple I am just missing, I am not sure, the setup is as follows:

    HPE 5700 - Firewall - Firewall to 2930F

    I have the firewalls set up and I am able to go between the two from both sites.

    On the remote side I have a vlan with a /30 IP and on the firewall port I the other IP. I can ping these no problem. On the switch I have the following OSPF configuration:

    ip routing
    ...
    router ospf
    area backbone
    redistribute connected
    redistribute static
    enable
    exit

    On each vlan I have an IP and also the ip ospf IP_ADDRESS area backbone commands.

    VLAN 1
    name "Default"
    untagged 1-28
    ip address x.x.x.x x.x.x.x
    ip ospf x.x.x.x area backbone
    exit

    vlan 30
    name "switch <--> Firewall"
    tagged 28
    ip address x.x.x.x x.x.x.x
    ip ospf x.x.x.x area backbone
    exit

    The other side should be good (I have not had any routing issues). Is there something I am missing from the configuration of OSPF?

    What I see is I am able to ping devices on the remote and main side like servers, but I do not have the ability to access shares. I can get to the web GUI for servers and such though... When I do sho ip route, I do see the networks on the main side so I know there is some communication going, but I am not sure what I am missing or if it is a firewall issue I need to look at.



  • 2.  RE: OSPF over Site to Site VPN (HPE5700 and Aruba 2930F)

    Posted Feb 11, 2022 07:16 PM
    It turned out to be a DNS issue, but I do have a question still.

    the remote end is able to access and ping everything at my Main Campus. From the Main Campus I am not able to get anywhere past the switch. I believe the routing is good since the remote end can reach everything at the Main Campus, but I am wondering if it is a Firewall issue. 

    The switch on the remote end has dhcp-server set up on it. The computer connected is getting an IP and all. I am able to tracert to the IP of the default-router on the DHCP-Server pool settings, but not past that... I was thinking a static route, but if I can get to that IP, I don't think it would be that...
    Original Message


Related Content