topic Re: IPSEC Tunnel down on GNS3 in General Topics

IPSEC Tunnel down on GNS3

Sulaiman.Ashraf — Fri, 23 Dec 2022 17:01:58 GMT

Hi- I am trying to implement exactly this article for ipsec - https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGkCAK

However the tunnel is not coming up, I am not sure if its gns issue or my configuration?

Wireshark packet drop also attached

Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.

Re: IPSEC Tunnel down on GNS3

OtakarKlier — Fri, 23 Dec 2022 22:10:59 GMT

Hello,

What do the system logs show for the VPN tunnel? This is where they are logged. I'm thinking either there is a configuration error or something is blocking the traffic somewhere. Check the traffic logs to see if the packets are making it and/or getting dropped/blocked by the PAN.

Regards,

Re: IPSEC Tunnel down on GNS3

Arnesh — Tue, 27 Dec 2022 18:41:40 GMT

Hi @Sulaiman.Ashraf

I agree with @OtakarKlier. You can check the logs (system & traffic) to understand why the connection is not getting established.

The other thing which I would suggest is to take the packet capture with the IPSec traffic. If required, you can run the test commands on the CLI to initiate the connection at the same time when you are capturing packets. You can follow this article.

Another article which is helpful - How to check Status, Clear, Restore, and Monitor an IPSec VPN Tunnel

Regards,

Re: IPSEC Tunnel down on GNS3

Sulaiman.Ashraf — Wed, 28 Dec 2022 06:26:15 GMT

Thanks for response, I have been looking at logs and connectivity, I could not find any issue,

Can you please review attached cli logs and packet captures, let me know if that helps in finding the issue?

Re: IPSEC Tunnel down on GNS3

OtakarKlier — Wed, 28 Dec 2022 22:18:44 GMT

Hello,

I think its in your tunnel config somewhere. Double check to make sure every setting is identical on both sides.

Regards,

Re: IPSEC Tunnel down on GNS3

Sulaiman.Ashraf — Fri, 30 Dec 2022 05:40:46 GMT

Thanks all, the issue is resolved -- I actually found the issue in routing on connected routers, for some reason default route was dropping traffic even though the destination was pingable.