topic No IPSec-Tunnels after Upgrade from 3.1.7 to 4.01 in General Topics https://live.paloaltonetworks.com/t5/general-topics/no-ipsec-tunnels-after-upgrade-from-3-1-7-to-4-01/m-p/42901#M31492 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>we run 8 PA-500s in 8 Branches. After upgrading them from 3.1.7 to 4.0.1 not all IPSec-Tunnels become active.</P><P></P><P>The Tunnels to the branches with the WAN-Interface connected to SDSL with PPPoE (automatic IP/Netmask/Gateway) stayed inactive, even after more than 12h.The WAN-Interface itself was online, pings to a external addresses were answered.</P><P>The IPSec-Tunnels to branches with WAN-Interfaces not connected with PPPoE were active immediately after rebooting the new software version.</P><P></P><P>Is there a known bug when upgrading IPSec-Tunnels with PPPoE-WAN-Interfaces from 3.1.7 to 4.0.1?</P><P></P><P>Thanks in advance.</P></BODY></HTML> Mon, 04 Apr 2011 08:37:03 GMT gratzadmin 2011-04-04T08:37:03Z No IPSec-Tunnels after Upgrade from 3.1.7 to 4.01 https://live.paloaltonetworks.com/t5/general-topics/no-ipsec-tunnels-after-upgrade-from-3-1-7-to-4-01/m-p/42901#M31492 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>we run 8 PA-500s in 8 Branches. After upgrading them from 3.1.7 to 4.0.1 not all IPSec-Tunnels become active.</P><P></P><P>The Tunnels to the branches with the WAN-Interface connected to SDSL with PPPoE (automatic IP/Netmask/Gateway) stayed inactive, even after more than 12h.The WAN-Interface itself was online, pings to a external addresses were answered.</P><P>The IPSec-Tunnels to branches with WAN-Interfaces not connected with PPPoE were active immediately after rebooting the new software version.</P><P></P><P>Is there a known bug when upgrading IPSec-Tunnels with PPPoE-WAN-Interfaces from 3.1.7 to 4.0.1?</P><P></P><P>Thanks in advance.</P></BODY></HTML> Mon, 04 Apr 2011 08:37:03 GMT https://live.paloaltonetworks.com/t5/general-topics/no-ipsec-tunnels-after-upgrade-from-3-1-7-to-4-01/m-p/42901#M31492 gratzadmin 2011-04-04T08:37:03Z Re: No IPSec-Tunnels after Upgrade from 3.1.7 to 4.01 https://live.paloaltonetworks.com/t5/general-topics/no-ipsec-tunnels-after-upgrade-from-3-1-7-to-4-01/m-p/42902#M31493 <HTML><HEAD></HEAD><BODY><P>Hello again,</P><P></P><P>the problem was that updating the software from 3.1.7 to 4.0.1 and the necessary reboot/autocommit produced a duplicate line 'ssl-decrypt' in the running (before and after) configuration. After loading the same configuration after the update from the saved file the error was fixed.</P></BODY></HTML> Wed, 06 Apr 2011 05:19:37 GMT https://live.paloaltonetworks.com/t5/general-topics/no-ipsec-tunnels-after-upgrade-from-3-1-7-to-4-01/m-p/42902#M31493 gratzadmin 2011-04-06T05:19:37Z