topic Re: Test IPsec tunnel after configuration in Firewall and Security Management

Test IPsec tunnel after configuration

cir007 — Wed, 25 Jan 2023 10:54:54 GMT

Hello CM,

is there a way to test if the IPsec tunnel will set up correctly after configure, whitout having to wait for some host in enc domain, to generate some interesting traffic. I don't think hping2 is the way to go (also it works on some GW on other not - same command) and CP Packet Injector is not a thing anymore in new versions. What is up with that CP? Will you provide us with any, up to date, packet generator tool that we can use?

Cheers,

Re: Test IPsec tunnel after configuration

PhoneBoy — Thu, 26 Jan 2023 01:51:23 GMT

I know we are looking at a replacement for pinj in R80.20 and above.
In terms of checking if a VPN will fully come up or not...that depends on things outside our purview if the remote end is a third party.

Re: Test IPsec tunnel after configuration

the_rock — Thu, 26 Jan 2023 02:30:17 GMT

I had case with TAC last year about this as customer asked, but they came back saying there was no official CP tool for this. This was in July 2022, but maybe something changed since, not sure.