topic Re: IPSEC tunnel is up but can not ping through in General Topics

IPSEC tunnel is up but can not ping through

MP18 — Tue, 23 Apr 2019 22:49:54 GMT

I have IPSEc ikev1 tunnel with vendor.

Phase 1 and 2 are up and green.

From PA from my Lan interface when I ping remote lan subnet ping does not work.

I see no return traffic from vendor to PA.

IS this normal behaviour to have Phase 1 and 2 up but routing does nor work both way?

reaper — Wed, 24 Apr 2019 10:16:05 GMT

phases 1 and 2 are simply the connection, routing is still needed on both ends before packets can pass through

have both sides set a static route to the remote network into the tunnel

does the remote end rely on ProxyIDs to properly route packets into the tunnel

have security policies been configured to allow both ends to communicate through the tunnel

MP18 — Wed, 24 Apr 2019 19:05:59 GMT

Vendor Device interface - ping was disabled

all good now.