Jump to content
Welcome to our new Citrix community!

connected VPN users can't ping each other on the same VPN IP pool


Yousaf

Recommended Posts

Hello everyone

 

I have implemented a new VPX , firmware 12.1 build 61.19

setup the vpn gateway along with internal IP pool, and added routes to internal networks.

 

once I'm connected to VPN,I get an IP from the vpn pool and I'm able to reach all the networks defined in routes, servers, web servers, internet etc 

 

my issue is this:

I can't ping other users who are connected to the same VPN gateway , users who has an IP from the same vpn ip pool 

lets say my vpn IP 10.10.10.1 ,  I can't ping another user who is 10.10.10.2 

the good thing is this , I can RDP to the users computers .. 

but I'm still wondering why I can' ping/icmp other VPN users? 

I can't find the logic for this issue to be honest, I have checked the ACL , there no ACL defined to deny icmp

 

any suggestion or idea will be much appreciated 

thank you

Link to comment
Share on other sites

9 minutes ago, Yousaf said:

Hello everyone

 

I have implemented a new VPX , firmware 12.1 build 61.19

setup the vpn gateway along with internal IP pool, and added routes to internal networks.

 

once I'm connected to VPN,I get an IP from the vpn pool and I'm able to reach all the networks defined in routes, servers, web servers, internet etc 

 

my issue is this:

I can't ping other users who are connected to the same VPN gateway , users who has an IP from the same vpn ip pool 

lets say my vpn IP 10.10.10.1 ,  I can't ping another user who is 10.10.10.2 

the good thing is this , I can RDP to the users computers .. 

but I'm still wondering why I can' ping/icmp other VPN users? 

I can't find the logic for this issue to be honest, I have checked the ACL , there no ACL defined to deny icmp

 

any suggestion or idea will be much appreciated 

thank you

Hello

 

Can the remote computer reply to a ping outside the VPN?

I mean by default ICMP is not allowed/open on windows. 
you need to turn off printer at least. 
 

Arnaud 

  • Like 1
Link to comment
Share on other sites

5 minutes ago, Arnaud Pain said:

Hello

 

Can the remote computer reply to a ping outside the VPN?

I mean by default ICMP is not allowed/open on windows. 
you need to turn off printer at least. 
 

Arnaud 

 

Hi Arnaud 

 

all the internal network/servers able to ping the VPN users , lets say internal servers 10.5.5.5

will be able to ping vpn users 10.10.10.1 , and 10.10.10.2 

 

also the vpn users , are able to ping all the network and servers so 10.10.10.1 and 10.10.10.2 are able to ping all network/servers like 10.5.5.5

 

the issue exactly VPN users in the same VPN pool are not able to ping/icmp each other 

and FW is disabled in all windows client

 

and if it is the Anti virus , then I would say , then why the servers are able to ping all the vpn users why the AV in the users windows computer didn't block that too? 

 

I'm really confused here and i dont know where to look :( 

Link to comment
Share on other sites

5 minutes ago, Yousaf said:

 

Hi Arnaud 

 

all the internal network/servers able to ping the VPN users , lets say internal servers 10.5.5.5

will be able to ping vpn users 10.10.10.1 , and 10.10.10.2 

 

also the vpn users , are able to ping all the network and servers so 10.10.10.1 and 10.10.10.2 are able to ping all network/servers like 10.5.5.5

 

the issue exactly VPN users in the same VPN pool are not able to ping/icmp each other 

and FW is disabled in all windows client

 

and if it is the Anti virus , then I would say , then why the servers are able to ping all the vpn users why the AV in the users windows computer didn't block that too? 

 

I'm really confused here and i dont know where to look :( 

Mohammad. 
 

you should look here https://support.citrix.com/article/CTX232237

 

Arnaud

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...