topic Re: TUNNEL STATUS RED AWS PAN TO ONPREM PAN in General Topics

TUNNEL STATUS RED AWS PAN TO ONPREM PAN

M.Cipriano — Fri, 03 May 2024 06:07:23 GMT

Hi Guys,

Need your help, as I cannot figured out what's wrong with my configuration. Both side of my Phase 1 are working fine but when it comes to Phase 2 connection is not complete. Any idea how to fix this issue?

Here is my AWS PAN configuration. Please note that my local IP is a private IP address which is I think due to being a VM PAN but I associate it an Elastic IP address. But when I used the elastic ip address as a local ip address ike status got down.

Thank you in advance for your assistance.

Re: TUNNEL STATUS RED AWS PAN TO ONPREM PAN

Raido_Rattameister — Fri, 03 May 2024 13:00:25 GMT

Generate traffic on AWS side and then check System logs on Palo.

You can use filter below to see only VPN events.

( subtype eq vpn)

Do you have NAT-T enabled on IKE gateway? (IP on your side is not public IP).

Does it work if you delete proxy id's on Palo side?

Re: TUNNEL STATUS RED AWS PAN TO ONPREM PAN

M.Cipriano — Mon, 06 May 2024 06:28:02 GMT

Hi,

I already resolved the issue. Anyway, thanks for the response.