VPN online, but some applications like RDP do not work

We currently have a double configuration Dual DMVPN Hub as described in this document http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml#dualhubdual

The tunnels are online and allow such as ping and telnet traffic. However other traffic rdp and vnc will not work.

Change the mtu on the tunnel interfaces and using the custom still 'ip of tcp - mss adjust"allow RDP and others.

How do fix us this?

Thank you in advance.

Thanks for posting the configs. I took a look at them and they clarify a number of things.

If applications such as telnet and ping function, then we can be comfortable that it isn't a problem with IPSec. When some applications work and some do not I see several possible explanations:

-There may be an access list that restricts certain traffic. You are saying that the access list is not the problem and since it is not sent I have no way to check that if I accept that is not the issue.

-I see you do things with ip inspect. I didn't understand if there is an intervention of the it. You can evaluate this as a potential problem.

-MTU issues can cause this. I see that you use to set a value of 1440 tcp adjust-mss ip. In my experience of use of ACCORD with IPSec, I found that 1440 was too large. At least as a test, I suggest you set the mss 1375 and see what happens. My reading of the documentation for adjust-mss also indicated that it should be applied to the physical interface where traffic increased. I see that you applied on the tunnel. At least as a test, I suggest that you apply it to physical interfaces, where traffic will pass.

Try these things and let us know if anything changes.

HTH

Rick

Tags: Cisco Security

Similar Questions

Maybe you are looking for