<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Hi All<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>We have successfully established a tunnel from a server hosted in cloud to a remote server. On executing “ipsec status”, we can see the “IPsec SA established” message. The cloud server has a local IP (say xl.xl.xl.xl) and we have also assigned a public IP (xp.xp.xp.xp) to this cloud server. The remove server has an IP of say xr.xr.xr.xr. The remote server’s firewall allows requests from xp.xp.xp.xp (public IP). Requests from any other IP are blocked in the firewall. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Now, when we do a telnet or ping to the remote server from the local server, it times out without any response. The reason is that the remote server’s firewall sees the request coming from the cloud server’s local IP (xl.xl.xl.xl) and the firewall does not allow requests from this IP. The firewall allows only the public IP (xp.xp.xp.xp). Since the tunnel is successfully established, shouldn’t the telnet or ping take the public IP (rather than the local IP)?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Any help would be really appreciated.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Best Regards<o:p></o:p></p><p class=MsoNormal>Anupam Malhotra<o:p></o:p></p></div></body></html>