topic IPSEC tunnel is up but traffic is doesn't passing through over VPN in Cloud Firewall

IPSEC tunnel is up but traffic is doesn't passing through over VPN

Karthi_N — Tue, 17 Oct 2023 15:41:49 GMT

-We have configured IPSEC tunnel with Single IP address both side encryption domain and ACLs are added between them.

-The tunnel is up but unable to ssh (policy already placed).

the_rock — Tue, 17 Oct 2023 23:35:40 GMT

We need way more info in order to help you properly here. For example:

-what do logs show?

-what about captures?

-is traffic going through the right interface?

-any natting through the VPN tunnel?

-what do ike.elg and vpnd.elg files show?

You can also try do basic debugs:

vpn debug trunc (will "reset" vpn debug files)

vpn debug ikeon

-generate some traffic

vpn debug ikeoff

Look for ike.elg and vpnd.elg in $FWDIR/log dir on the firewalls

Hope that helps.

Kind regards,

Andy

G_W_Albrecht — Wed, 18 Oct 2023 10:48:30 GMT

Which non-ssh traffic passes thru VPN tunnel ? Are both peers CP GWs and which version ?