Management, Networking, Logging and Reporting Ipsec Site to Site VPN ( SG125 to SG125) does not establish all Tunnels but shows them as established on one side

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 4 replies
Subscribers 4 subscribers
Views 4663 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Ipsec Site to Site VPN ( SG125 to SG125) does not establish all Tunnels but shows them as established on one side

HelmutZengerling over 8 years ago

Strange Situation,

both sides SG125 with Firmware 9.408-4

one end of the tunnel shows

the other ...

any clues ?

before the upgrade to 9.408-4 it worked fine.

Yours

Helmut

This thread was automatically locked due to age.

Parents

0 sachingurung over 8 years ago

Hi Helmut,

Is the IPSec connection just showing down in one of the UTM but the tunnels are up and working? What is the firmware version on the UTM which shows the link down?

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 HelmutZengerling over 8 years ago in reply to sachingurung

As i stated in the beginning of my post both sides have the same firmware,
and surely the tunnels du not work.

Best

Helmut
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 8 years ago in reply to HelmutZengerling

Helmut, it appears that there's only a single SA that fails to establish. Please show the Edit of the relevant Network definition with 'Advanced' open for both UTMs.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 HelmutZengerling over 8 years ago in reply to BAlfson

Hi Bob,

solved the Problem myself.

It is absolute strange, somehow the upgrade re-enabled an old static policy route that was disabled years ago but i forgot to delete it.

I deleted it and the SA did come up, working again.

Cheers

Helmut
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 HelmutZengerling over 8 years ago in reply to BAlfson

Hi Bob,

solved the Problem myself.

It is absolute strange, somehow the upgrade re-enabled an old static policy route that was disabled years ago but i forgot to delete it.

I deleted it and the SA did come up, working again.

Cheers

Helmut
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data