topic Site-Site VPN not generating debugs. Certh-Auth in Spark Firewall (SMB)

Site-Site VPN not generating debugs. Certh-Auth

Haris2887 — Tue, 08 Oct 2024 06:12:18 GMT

HI All,

I am trying to setup IKEv2 Site-Site VPN.

I am trying to troubleshoot using sk62482.

However the debug logs are coming back empty.

Running R81.10.

Oneside Checkpoint , Other-side is Linux .

We have some strict requirements that prevents us from installing VPN software on out linux environments. We must use Native built into the OS.

I am happy to setup the Cert auth etc, but currently I am not even getting the VPN Debugs hence want to make sure the SK article is correct.

Re: Site-Site VPN not generating debugs. Certh-Auth

G_W_Albrecht — Tue, 08 Oct 2024 11:26:42 GMT

I would open a SR# with CP TAC to get this resolved! Remember, you set the Remote Site to initiate VPN, so debugs on Spark will not be usefull if the peer fails to connect at all - better debug the peer side...

Re: Site-Site VPN not generating debugs. Certh-Auth

PhoneBoy — Tue, 08 Oct 2024 19:30:07 GMT

Before looking at debugs, you might want to see if you're even getting traffic from the other VPN peer.
This can easily be achieve with tcpdump.
If you do not see any traffic initiated from the remote gateway, then you need to start there.