topic VPN Issues with a Firepower in Spark Firewall (SMB)

VPN Issues with a Firepower

markiejd — Sun, 13 Aug 2023 11:06:11 GMT

Hi,

We have a checkpoint 1430 that has been connected to a cisco Firepower via a S2S VPN. If the tunnel goes down from the firepower end 1 can ping and bring the tunnel back up but from the checkpoint end it will not bring the tunnel up. Any ideas or thoughts ?

Thanks for any help.

Re: VPN Issues with a Firepower

Chris_Atkinson — Mon, 14 Aug 2023 08:11:44 GMT

Does the 1430 have a Dynamic IP / what firmware version & build is it deployed with?

Re: VPN Issues with a Firepower

markiejd — Mon, 14 Aug 2023 08:21:16 GMT

Hi Chris,

It is static's both end's and the version is

Version:

R77.20.87 (990173120

Thanks,

Re: VPN Issues with a Firepower

Nüüül — Mon, 14 Aug 2023 09:57:40 GMT

do you have access to firepower end?

for me, i´d start up a debug on the firepower end while establishing (or trying to) the vpn.

Best via CLI -> diagnostic-cli (system support diagnostic-cli, debug crypto <what you need>)