Ipsec tunnel issue

FarhanKoujalgi — Wed, 24 Nov 2021 16:28:43 GMT

there are two location site a and b in which i created a ipsec tunnel between them its up.

As i ping there LAN IP i am able to ping. there LAN network

Site A LAN network is 192.168.4.x/24 Site B LAN network is 192.168.x.1/24.

I am able to ping both the interfaces by cli and also check logs that are going through a tunnel.

But the issue there are IPs based on the telephone on both site.

The site A person is able to call site B telephone and the voice communication is ok.

But the Site B person was not able to call the site A location is shows failed.

I checked the logs both are going through tunnel and byte was received and sent.

The site B person able to call on another location vice versa.

I also checked the metric for both the palo alto firewall is okay

Nee some help

Re: Ipsec tunnel issue

LAYER_8 — Thu, 02 Dec 2021 16:35:19 GMT

For your bottom two rules, interzone-default and intrazone-default, have you overidden them to enable logging? Default Palo ships with that disabled, so you wouldn't know if traffic is making it all the way to the bottom of your rule hierarchy. So there could be traffic getting dropped you aren't seeing.

topic Re: Ipsec tunnel issue in General Topics

Ipsec tunnel issue

Re: Ipsec tunnel issue