Can you help me in failed ping ?

Scenario :




Right windows PC has two ip addresses configured in its nic as well as right routerboard
Right pc has a static route to reach system on the left

Problem:

Right PC can ping left PC

Left PC can ping printer but CANNOT ping right PC

Left routerboard as well can ping printer but CANNOT ping left PC

A traceroute from left routerboard (or PC) to right PC ends to rigth routerboard tunnel endpoint 1.1.1.2


Any idea ???
Thanks

One problem I’ve had is that if a windows machine isn’t part of an active directory domain, the default firewall will not allow ping responses to other subnets.
Hard to find, and I love it when MS protects you from nothing.

PC doesn’t need static route, because left is not locally reachable subnet, so PC would send packets to left subnet to its default gateway, which is same router as 10.0.0.190.

Do you really mean left RB and left PC? Because they are directly connected. If nothing else, this should work.

As usual, config exports from both routers would probably help. Now we have to trust you that you have everything configured correctly, but what if you don’t…

Sorry, I mean

“Left routerboard as well can ping printer but CANNOT ping right PC”

Skuykend : there is no firewall enabled on both pc

From right routerboard i can ping locally right pc , but I cannot from left one from its subnet through tunnel (gre-ipsec) to right pc

I haven’t tried , but I suppose if I set 10.0.0.190 as default gateway to right pc , it should reply , cannot try now…

In fact, printer that hasn’t two subnet, and 10.0.0.190 as gateway , replies correctly…

Probably two subnets on same windows NIC is the culprit…

Please note 10.0.0.x subnets are different (different masks) 10.0.0.0 - 10.0.0.127 and 10.0.0.128 - 10.0.0.191

I tried two subnets on Windows the same way you have it and it worked fine, it must be something else.