VPN Issues with a Firepower

[markiejd]

Hi, 

We have a checkpoint 1430 that has been connected to a cisco Firepower via a S2S VPN. If the tunnel goes down from the firepower end 1 can ping and bring the tunnel back up but from the checkpoint end it will not bring the tunnel up. Any ideas or thoughts ?

Thanks for any help.

[Chris_Atkinson]

Does the 1430 have a Dynamic IP / what firmware version & build is it deployed with?

[markiejd]

Hi Chris,

It is static's both end's and the version is 

Version:

R77.20.87 (990173120

Thanks,

[Nüüül]

do you have access to firepower end? 

for me, i´d start up a debug on the firepower end while establishing (or trying to) the vpn.

Best via CLI -> diagnostic-cli (system support diagnostic-cli, debug crypto <what you need>)