CradlePoint to Palo Alto VPN with failover LTE

Attention: The LIVEcommunity is experiencing an interruption with videos in some areas. We apologize for any inconvenience this may cause. Thank you for your patience as we work towards a solution to restore videos.
L3 Networker

CradlePoint to Palo Alto VPN with failover LTE

I have a CradlePoint MBR1400 router at a remote location.  The primary WAN connection is delivered via Ethernet and the secondary over Verizon 4G.  The primary is a static IP and Verizon's is behind NAT.  When I enable NAT-T on the Palo Alto the primary tunnel came up.  I flip the CradlePoint to use the LTE and the tunnel re-establishes without an issue.  When I failback the tunnel shows active however I cannot pass any traffic through it.  I rebooted the CradlePoint and the tunnel will still not pass traffic.  However after the restart, I went back to the LTE instead of Ethernet and I can pass traffic.  I am wondering if NAT is somehow coming into play on the 3020 since I have NAT-T enabled.  Turning off does not bring the tunnel up either.  I flipped everything back to main mode instead of aggressive (since I need that when using the 2 connections as once is DHCP) and the traffic can pass again.  Has anyone else run into something similar to this?

Tags (1)
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!