Because the routing configuration problem lead to SVN3000 network extension mode cannot access intranet serve

Publication Date:  2012-11-06 Views:  280 Downloads:  0
Issue Description

Device version: SVN3000 V100R002
IP distribution: SVN3000: 192.168.1.10; SW: 192.168.1.1; SERVER: 192.168.2.10
The extranet client SSLVPN network extension mode can be established, also can get IP, and can PING pass IP directly connected by SW, but cannot PING pass the SERVER connected by SW.
Alarm Information
none
Handling Process
Check SVN3000 and find routing is:
ip route-static 0.0.0.0 0.0.0.0 192.168.1.1
ip route-static 192.168.2.0 0.0.0.255 192.168.2.10
Find the next hop to 192.168.2.0 network segment setting is error, so routing error packet cannot reach SVN3000 192.168.2.0 (server) network segment. After delete the routing with problems, the problem is solved.
Root Cause
1. Check the packet filtering, normal.
2. Check SSLVPN configuration, normal.
3. Check switch configuration, normal.
4. Check the SVN3000 routing, find a static routing has problem.
Suggestions
If find that the some network is passable and some impassability, can generally check from routing and packet filtering.

END