VPN Broken?

[bengreene]

Hello!

I'm new to Zentyal and trying to set up a Zentyal-to-Zentyal Tunnel.

There's 2 Offices.

One uses a standard ADSL connection and the Zentyal (A) Gateway sits behind the Router.
The other one is a Datacenter and the Zentyal (B) Gateway/VPN Server has a public IP Adress on the external Interface.

The Firewall has been turned off completely for testing.

Zentyal (A) External: 192.168.1.0
Zentyal (A) Internal: 192.168.101.0
Zentyal (A) Internal Address: 192.168.101.1
Zentyal (A) VPN Address: 192.168.166.2

Zentyal (B) External: XX.XX.XX.XX
Zentyal (B) Internal: 192.168.66.0
Zentyal (B) Internal Address: 192.168.66.253
Zentyal (B) VPN Subnet: 192.168.166.0
Zentyal (B) VPN Address: 192.168.166.1

- Now the Clients behind the Zentyal A can't reach any Servers behind Zentyal B.

- The Zentyal B Server itself can be reached from inside the Zentyal A Network.

Traceroute from Zentyal A itself to a Server behind Zentyal B:

Code: [Select]

traceroute to 192.168.66.1 (192.168.66.1), 30 hops max, 60 byte packets
 1  192.168.166.1  34.677 ms  33.905 ms  33.950 ms
 2  192.168.66.1  33.838 ms  33.729 ms  33.728 ms

Traceroute from a Client behind Zentyal A to a Server behind Zentyal B:

Code: [Select]

traceroute to 192.168.66.1 (192.168.66.1), 64 hops max, 52 byte packets
 1  192.168.101.1 (192.168.101.1)  1.248 ms  0.798 ms  0.454 ms
 2  192.168.166.1 (192.168.166.1)  70.066 ms  35.868 ms  34.944 ms
 3  * * *
 4  * * *
 5  * * *
Can anyone tell me, why this happens?