topic Re: Site-to-Site VPN Fails in AWS in VM-Series in the Private Cloud

Site-to-Site VPN Fails in AWS

karimkalunga — Wed, 02 Apr 2025 09:20:13 GMT

I have setup VPN tunnel on VM-Series Next-Gen Virtual Firewall w/ Advanced Security Subs (PAYG) in AWS with a remote site. I am having issues to establish VPN tunnel, log shows that phase 1 & 2 is loaded. For testing purposes, I have created one policy rule to allow any traffic to pass, I believe at least phase 1 should be up. I hope someone can assist to point me what I might be doing wrong from attached screenshots.

Re: Site-to-Site VPN Fails in AWS

kiwi — Wed, 02 Apr 2025 10:47:37 GMT

Hi @karimkalunga ,

I'd start by checking the connectivity issues between VPN peers including packet capture to isolate the issue further.

The logs seems kinda scarce to identify the root issue at the moment.

Can you debug further ?
https://live.paloaltonetworks.com/t5/support-faq/support-faq-how-to-troubleshoot-ipsec-vpn-connectivity-issues/ta-p/590317

Kind regards,

-Kim.

Re: Site-to-Site VPN Fails in AWS

karimkalunga — Wed, 02 Apr 2025 17:23:20 GMT

Hi @kiwi, thank you for your prompt reply. I have an interface (different from management interface) that I've assigned a public IP address (Elastic IP) which is my peer IP. This peer IP is somehow not reachable from remote site but its public. Two other private interfaces connected to my nodes, other phase 1 configurations are the same on both sites.