Site to Site VPN HTTPS External Interface

KWD — Tue, 29 Oct 2019 20:27:18 GMT

Hello,

I have an existing clusterA with 2 gateways and a SMS server. Cluster A has several internal interfaces, an external interface and a sync. I have a new external clusterB that I have successfully added to my SMS. The external clusterB has 2 internal interfaces, 1 external interface and a sync interface.

From the internal interface of clusterA to the external interface of new clusterB, I was able to SSH, HTTPS and ping. After setting up a site to site VPN between clusterA and clusterB, I can no longer SSH or HTTPS from the internal interface of clusterA to the external interface of clusterB, but I can still ping from the internal interface of clusterA to the external interface of clusterB.

I can SSH/HTTPS from the internal interface of clusterA to the internal interfaces of cluster B.

On my other site to site VPNs (which I don't manage with my SMS), I see SSH being accepted on an implied rule, but on my new cluster, SSH just drops to the cleanup rule.

Any ideas on what the issue is? Why I can no longer SSH/HTTPS from internal interface of clusterA to the external interface of clusterB?

Thanks

Re: Site to Site VPN HTTPS External Interface

PhoneBoy — Fri, 01 Nov 2019 20:09:58 GMT

Have you done a tcpdump/fw monitor on both ends to very the traffic is getting there?
What does it look like?
Also, what errors do you see in the logs?

Re: Site to Site VPN HTTPS External Interface

KWD — Mon, 04 Nov 2019 17:35:32 GMT

I was able to resolve the issue. But I appreciate your reply.

Re: Site to Site VPN HTTPS External Interface

PhoneBoy — Tue, 05 Nov 2019 12:29:02 GMT

What was the issue?

topic Site to Site VPN HTTPS External Interface in Firewall and Security Management

Site to Site VPN HTTPS External Interface

Re: Site to Site VPN HTTPS External Interface

Re: Site to Site VPN HTTPS External Interface

Re: Site to Site VPN HTTPS External Interface