I'm making an IPsec tunnel between Cisco 1841 router with Cisco 3G card HWIC 3G HSPA and GX400 airlink devicec, Please find the network diagram attached.

configuration on the Cisco side is as under

Router#show running-config

Building configuration...

Current configuration : 1962 bytes

!

! Last configuration change at 09:20:52 UTC Tue Nov 22 2011

!

version 15.1

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Router

!

boot-start-marker

boot-end-marker

!

!

!

no aaa new-model

!

dot11 syslog

ip source-route

!

!

!        

!        

!        

ip cef   

no ipv6 cef

!        

multilink bundle-name authenticated

!        

chat-script gsm "" "ATDT*98*1#" TIMEOUT 60 "CONNECT"

crypto pki token default removal timeout 0

!        

!        

!        

!        

license udi pid CISCO1841 sn FHK142576NU

!        

redundancy

!        

!        

controller Cellular 0/0

!        

!        

!        

crypto isakmp policy 1

encr aes

authentication pre-share

group 2 

lifetime 7200

crypto isakmp key cisco address 10.241.144.2

!        

!        

crypto ipsec transform-set tset esp-aes esp-sha-hmac

!        

crypto map smap 1 ipsec-isakmp

set peer 10.241.144.2

set security-association lifetime seconds 7200

set transform-set tset

set pfs group2

match address 101

!        

!        

!        

!        

!        

interface FastEthernet0/0

ip address 192.168.5.1 255.255.255.0

duplex auto

speed auto

!

interface FastEthernet0/1

no ip address

shutdown

duplex auto

speed auto

!

interface Cellular0/0/0

ip address negotiated

ip virtual-reassembly in

encapsulation ppp

dialer in-band

dialer string gsm

dialer-group 1

async mode interactive

ppp authentication pap callin

ppp eap refuse

ppp chap refuse

ppp ms-chap refuse

ppp ms-chap-v2 refuse

ppp ipcp dns request

crypto map smap

!

interface Cellular0/0/1

no ip address

encapsulation ppp

!

ip forward-protocol nd

no ip http server

no ip http secure-server

!

!

ip route 0.0.0.0 0.0.0.0 Cellular0/0/0

!

logging esm config

access-list 101 permit ip 192.168.5.0 0.0.0.255 any

dialer-list 1 protocol ip permit

!

!

!

!

!        

!

control-plane

!

!

line con 0

line aux 0

line 0/0/0

exec-timeout 0 0

script dialer gsm

modem InOut

no exec

rxspeed 7200000

txspeed 2000000

line 0/0/1

no exec

rxspeed 7200000

txspeed 2000000

line vty 0 4

login

transport input all

!

scheduler allocate 20000 1000

end

configuration on other device GX400 is attached, after the configuration IPsec tunnel comes up and i can ping both GX400 local ip address 192.168.2.1 and device IP 192.168.2.54, but from device attached to GX400 i can ping only my routers local address 192.168.5.1 but i cannot ping 192.168.5.2.

Ping from client attached to Cisco Router

ping 192.168.2.1 (Successfull)

ping 192.168.2.54 (Successfull)

Ping from client attached to GX400

Ping 192.168.5.1 (Successfull)

ping 192.168.5.2 (Fail)

I think some route is missing on Cisco router, can you please guide me what is most probably the reason of this ping failure?

Best Regards

Usman