VPN established but XFRM Gateway down on both sides

This is an issue that I have seen with multiple customers. The VPN connection as Tunnel interface is established. The XFRM is configured to be non-overlapping in any sense with other IP subnets on the Firewall. Even then the gateway shows down. Here is snapshot from one of our customers setup. Is there any solution for this? There are multiple threads on this forum about this issue but there seems to be no answer, anyone has been able to fix this?

Added TAGs
[edited by: Raphael Alganes at 9:15 AM (GMT -8) on 13 Nov 2024]

Parents

0 LuCar Toni 12 days ago

Essentially we are pinging the peer IP.

In this case the 1.1.1.1?
Are you sure, you want to use public used IPs within a tunnel? Would highly recommend to change the IPs of the XFRM.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Mayuresh Bhagwat 12 days ago in reply to LuCar Toni

I have tried 10.0.x.x/30 as well but that did not help, hence I tried 1.1.1.1
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Mayuresh Bhagwat 12 days ago in reply to LuCar Toni

I have tried 10.0.x.x/30 as well but that did not help, hence I tried 1.1.1.1
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 LuCar Toni 12 days ago in reply to Mayuresh Bhagwat

Check the XFRM Interface: Are both sides in status connected?

Then check the packet capture on this particular interface - Do you see traffic?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel