https://live.paloaltonetworks.com/t5/general-topics/no-ping-reply-via-palo-to-palo-s2s/m-p/593010#M118019 <P>I have created a site to site and both phase 1 and 2 are up.</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_0-1721915272107.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61062i5E4FD244DDB1C7A2/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_0-1721915272107.png" alt="MAllen_0-1721915272107.png" /></span></P> <P>Network interfaces are configured as below</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_1-1721915366210.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61064i393370674FB33700/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_1-1721915366210.png" alt="MAllen_1-1721915366210.png" /></span></P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_3-1721915483840.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61066iB45DC25676A1C651/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_3-1721915483840.png" alt="MAllen_3-1721915483840.png" /></span></P> <P>Static routes are configured for S2S tunnels</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_4-1721915734905.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61067iF3F2B48D54DD5C7F/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_4-1721915734905.png" alt="MAllen_4-1721915734905.png" /></span></P> <P>Policy is being hit but not reply</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_5-1721915798708.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61068i53C359FB048E9A2C/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_5-1721915798708.png" alt="MAllen_5-1721915798708.png" /></span></P> <P>Initiated a ping from a switch on the inside 192.168.1.0/24 to 192.168.2.0/24</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_2-1721915404611.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61065iE656D1D25FD1649B/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_2-1721915404611.png" alt="MAllen_2-1721915404611.png" /></span></P> <P>Routing&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_0-1721916120769.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61069i5992EB2C7F1D824F/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_0-1721916120769.png" alt="MAllen_0-1721916120769.png" /></span></P> <P>&nbsp;</P> <P>What am I missing here?</P> <P>&nbsp;</P> <P>&nbsp;</P> Thu, 25 Jul 2024 14:02:09 GMT M.Allen 2024-07-25T14:02:09Z https://live.paloaltonetworks.com/t5/general-topics/no-ping-reply-via-palo-to-palo-s2s/m-p/593010#M118019 <P>I have created a site to site and both phase 1 and 2 are up.</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_0-1721915272107.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61062i5E4FD244DDB1C7A2/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_0-1721915272107.png" alt="MAllen_0-1721915272107.png" /></span></P> <P>Network interfaces are configured as below</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_1-1721915366210.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61064i393370674FB33700/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_1-1721915366210.png" alt="MAllen_1-1721915366210.png" /></span></P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_3-1721915483840.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61066iB45DC25676A1C651/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_3-1721915483840.png" alt="MAllen_3-1721915483840.png" /></span></P> <P>Static routes are configured for S2S tunnels</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_4-1721915734905.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61067iF3F2B48D54DD5C7F/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_4-1721915734905.png" alt="MAllen_4-1721915734905.png" /></span></P> <P>Policy is being hit but not reply</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_5-1721915798708.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61068i53C359FB048E9A2C/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_5-1721915798708.png" alt="MAllen_5-1721915798708.png" /></span></P> <P>Initiated a ping from a switch on the inside 192.168.1.0/24 to 192.168.2.0/24</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_2-1721915404611.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61065iE656D1D25FD1649B/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_2-1721915404611.png" alt="MAllen_2-1721915404611.png" /></span></P> <P>Routing&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_0-1721916120769.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61069i5992EB2C7F1D824F/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_0-1721916120769.png" alt="MAllen_0-1721916120769.png" /></span></P> <P>&nbsp;</P> <P>What am I missing here?</P> <P>&nbsp;</P> <P>&nbsp;</P> Thu, 25 Jul 2024 14:02:09 GMT https://live.paloaltonetworks.com/t5/general-topics/no-ping-reply-via-palo-to-palo-s2s/m-p/593010#M118019 M.Allen 2024-07-25T14:02:09Z https://live.paloaltonetworks.com/t5/general-topics/no-ping-reply-via-palo-to-palo-s2s/m-p/593027#M118023 <P>Was missing the inside static route</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_0-1721922978473.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61076i11C6C97B646112EE/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_0-1721922978473.png" alt="MAllen_0-1721922978473.png" /></span></P> <P>&nbsp;</P> <P>And also the policy required traffic to be allowed both ways! now pinging!</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MAllen_1-1721923026137.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61077i24A590E8035864B4/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="MAllen_1-1721923026137.png" alt="MAllen_1-1721923026137.png" /></span></P> <P>&nbsp;</P> Thu, 25 Jul 2024 15:57:13 GMT https://live.paloaltonetworks.com/t5/general-topics/no-ping-reply-via-palo-to-palo-s2s/m-p/593027#M118023 M.Allen 2024-07-25T15:57:13Z