I have a network that looks like this
10.20.30.0/24 <---VPN---> 172.16.1.0/24
I can ping and connect to all hosts from the 172.x side, but can only ping hosts from the 10.x side.
Actually I realized I can connect to the remote router (172.16.1.250) from the 10.x side.
I am running a cisco router on my end.
Below are my access lists.
ip access-list extended Crypto-list
permit ip 172.16.1.0 0.0.0.255 10.20.30.0 0.0.0.255
permit ip 10.20.30.0 0.0.0.255 172.16.1.0 0.0.0.255
ip access-list extended Internet-inbound-ACL
permit udp host 1.2.3.4 any eq isakmp
permit esp host 1.2.3.4 any
permit ip any any
permit tcp any any
access-list 102 deny ip 172.16.1.0 0.0.0.255 10.20.30.0 0.0.0.255
access-list 102 permit ip 172.16.1.0 0.0.0.255 any
access-list 102 deny ip 10.20.30.0 0.0.0.255 172.16.1.0 0.0.0.255
dialer-list 1 protocol ip permit