S2S VPN problem with AWS

ka1 — Thu, 12 Mar 2020 08:33:54 GMT

I have a Checkpoint SG 15600 cluster with GAIA R80.30. Trying to establish a site to site vpn tunnel with AWS Virtual Private Gateway. I have a Route based vpn setup on my end. On the day of deployment when initiated the traffic the tunnel did not come up and I did not see any negotiations happening ( Did not see any IKE 500 packets coming to our network border router/Firewall, did not see any Key Install messages in Smart View Tracker ). AWS was unable to provide me any logs as it has been said that AWS Virtual Private Gateway is always configured to be as a "Responder" but not as a "Initiator" of the tunnel and hence they do not see any logs.

While I am debugging traffic on my end (fw ctl zdebug drop | grep X.X.X.X) i found:

@;1394424837;[cpu_31];[fw4_0];fw_log_drop_ex: Packet proto=17 X.X.X.X:500 -> Y.Y.Y.Y:500 dropped by fwpslglue_chain Reason: PSL Drop: ADVP;

Re: S2S VPN problem with AWS

G_W_Albrecht — Thu, 12 Mar 2020 09:14:25 GMT

Why not contact TAC to resolve this issue ?

Re: S2S VPN problem with AWS

ka1 — Thu, 12 Mar 2020 12:05:07 GMT

i did but could not able to get solution.

topic S2S VPN problem with AWS in General Topics

S2S VPN problem with AWS

Re: S2S VPN problem with AWS

Re: S2S VPN problem with AWS