topic Re: Restart is disabled because no ike sa was established in General Topics

Restart is disabled because no ike sa was established

MP18 — Mon, 24 Jun 2019 14:37:58 GMT

We have IPSEC tunnel to vendor.

Tunnel is up

Gui shows Phase 1 is red.

I can ping the IP on the tunnel on vendor side which is Gateway for Vendor LAN.

Unable to ping the LAN IP on vendor side.

PA shows traffic is passing but nothing coming back from vendor LAN?

MP18 — Mon, 24 Jun 2019 14:43:54 GMT

Now phase 1 is green still can not ping lan ip on vendor side.

OtakarKlier — Mon, 24 Jun 2019 16:44:59 GMT

Hello,

Does the vendor allow the Ping? Do you allow it via a security policy and by inteface management policy?

Regards,