topic Re: VPN and RIM Issue in Firewall and Security Management

VPN and RIM Issue

paulraj29 — Sun, 25 Aug 2024 05:54:19 GMT

HI urgent help need,

We have firewall in Datacenter and SMB 1500 device in remote site, both are connected via S2S VPN tunnel, I did upgrade the Datacenter firewall from R81.10 to R81.20 Take 76 on Aug 6th. All of sudden on Aug 16th , VPN is up on remote site, but not able to reach the internal IPs. When i check the routes on Datacenter firewall, I don't see the routes for the remote sites.

Basically, RIM is not working, It is not inserting the routes on to the DC routing table. VPN is up on both ends, but i suspects there is some issue on VPN that's the reason routes are not learning on DC firewall. can you advise on this, any bug on R81.20 Take 76?

Re: VPN and RIM Issue

the_rock — Sun, 25 Aug 2024 12:00:26 GMT

I know usually cprestart or rebooting the fw would fix such an issue in the past, but if not, in the meantime, I would examine routed.log file to see if you find anything there.

Also, run cpwd_admin list, top and ps -auxw to verify all the processes show E 1.

Andy

Re: VPN and RIM Issue

D_W — Sun, 25 Aug 2024 15:15:58 GMT

When you have a cluster at the DC you can try a failover. Had this with R81.10 T131. And ALL S2S VPNs where affected on this cluster (all own managed CPs of our Domain)

Re: VPN and RIM Issue

the_rock — Sun, 25 Aug 2024 16:03:23 GMT

Thats actually a really good idea.

Andy

Re: VPN and RIM Issue

the_rock — Sun, 25 Aug 2024 16:25:18 GMT

One thing you can do, IF youn have backup/clish config (which I hope you do) is look through the config and see what RIM config shows when it worked and cimply copy it over and test.

MInd you, RIM is always configured through smart console vpn community, so Im sure that has not changed at all, but still, worth checking.

Andy