One branch works, a second subnet fails
After an office expansion, hosts on the old LAN reach a partner through an IPsec tunnel. Hosts on the new LAN reach the internet but cannot reach the same partner.
1. Which test distinguishes a subnet-definition issue from a complete peer outage?
Read the worked answer
Use the same remote host and service from each LAN. Compare the source networks with both peers’ VPN domains and inspect the logs. The working old LAN gives you a control for the peer and service.