topic Re: Setting up an IPSEC VPN Tunnel on AWS.. Connects but no traffic.. in VM-Series in the Public Cloud

Setting up an IPSEC VPN Tunnel on AWS.. Connects but no traffic..

scottoliver — Sun, 19 May 2019 00:29:22 GMT

Hello everyone. I am having an issue setting up a VPN from my Palo to my AWS Palo and was hoping someone can help. I did look at other AWS VPN issue but all i saw was issues with aws. This is something else. I have the tunnel up and established but traffic is not working. I see traffic leaving my palo over the correct tunnel interface but it gets lost somewhere along the way. Since I cannot see the encrypted tunnel traffic I have no clue if the aws palo is getting it.

I followed the Palo alto instructions for doing this which isnt much different than setting up a normal ipsec tunnel. The palo guide says to use NAT Traveral option in the IKE gateway which I have tried with no luck. By all rights it should be wotking. Any suggestions?

Re: Setting up an IPSEC VPN Tunnel on AWS.. Connects but no traffic..

mls577 — Mon, 20 May 2019 02:25:51 GMT

Hello,

Do you see the VPN Phase 1 & 2 up and traffic counters incrementing?

Re: Setting up an IPSEC VPN Tunnel on AWS.. Connects but no traffic..

OtakarKlier — Mon, 20 May 2019 18:44:42 GMT

Hello,

If both phase 1 &2 are up, its probably the ACL firewall on AWS that is preventing the traffic.

Regards,

Re: Setting up an IPSEC VPN Tunnel on AWS.. Connects but no traffic..

fatboy1607 — Tue, 10 Sep 2019 04:19:23 GMT

@scottoliver , You need to check route table on AWS side to make sure it is pointing to correct VGW.

Do you see packets getting encrypted on palo alto side ?