Unable to allow traffic through specific a ports

Pavel88 — Tue, 02 Jun 2020 18:46:47 GMT

Hi All,

I'm trying to pass traffic through a specific tcp service 1022.

The traffic is being dropped and not encrypted within the VPN community.

All other traffic from that srs/dst is encrypted successfully.

the received messages are

Received a cleartext packet within an encrypted connection. (SC)

on fw ctl zdebug: dropped by chain ipsec methods ok Reason: No decryption message;

turning off fwaccell and vpnaccell didn't help.

Are there any helpful instructions on how to allow traffic using Inbound and Outbound Rules?

Thanks.

Re: Unable to allow traffic through specific a ports

PhoneBoy — Tue, 02 Jun 2020 22:57:00 GMT

I see these errors in an internal SK.
Please engage with the TAC on this.