VPN and RIM Issue

[paulraj29]

HI urgent help need, 

We have firewall in Datacenter and SMB 1500 device in remote site, both are connected via S2S VPN tunnel, I did upgrade the Datacenter firewall from R81.10 to R81.20 Take 76 on Aug 6th. All of sudden on Aug 16th , VPN is up on remote site, but not able to reach the internal IPs. When i check the routes on Datacenter firewall, I don't see the routes for the remote sites. 

Basically, RIM is not working, It is not inserting the routes on to the DC routing table. VPN is up on both ends, but i suspects there is some issue on VPN that's the reason routes are not learning on DC firewall. can you advise on this, any bug on R81.20 Take 76?

[the_rock]

I know usually cprestart or rebooting the fw would fix such an issue in the past, but if not, in the meantime, I would examine routed.log file to see if you find anything there.

Also, run cpwd_admin list, top and ps -auxw to verify all the processes show E 1.

Andy

[D_W]

When you have a cluster at the DC you can try a failover. Had this with R81.10 T131. And ALL S2S VPNs where affected on this cluster (all own managed CPs of our Domain)

[the_rock]

Thats actually a really good idea.

Andy

[the_rock]

One thing you can do, IF youn have backup/clish config (which I hope you do) is look through the config and see what RIM config shows when it worked and cimply copy it over and test.

MInd you, RIM is always configured through smart console vpn community, so Im sure that has not changed at all, but still, worth checking.

Andy