topic vpn site to site (Loosing the pings when ping from one end to another) in General Topics

vpn site to site (Loosing the pings when ping from one end to another)

imranshahid — Tue, 26 Sep 2017 19:51:19 GMT

hi,

i have setup a site to site vpn between 2 palos . the tunnel is established but when one user from his PC ping continuously to a pc or a server on the other end, it looses 1 icmp after sending 10 or 15 icmps.

My concern is how do check the credibility of the vpn tunnel

what is the best way to check the tunnel, any show commands etc

Thanks

Imran (Brighton)

Re: vpn site to site (Loosing the pings when ping from one end to another)

Raido_Rattameister — Tue, 26 Sep 2017 21:48:07 GMT

Do you see packet loss when pinging between Palo untrust interfaces or only if traffic goes over tunnel?

Assume one Palo has wan IP 1.1.1.1 and other has 2.2.2.2 then run command on 1.1.1.1

ping source 1.1.1.1 host 2.2.2.2

Dead Peer Detection config is same at both sides on IKE Gateway?