IPSEC Tunnel down on GNS3

[Sulaiman.Ashraf]

Hi- I am trying to implement exactly this article for ipsec - https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGkCAK

However the tunnel is not coming up, I am not sure if its gns issue or my configuration?

Wireshark packet drop also attached 

Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.

[OtakarKlier · Accepted solution]

Hello,

What do the system logs show for the VPN tunnel? This is where they are logged. I'm thinking either there is a configuration error or something is blocking the traffic somewhere. Check the traffic logs to see if the packets are making it and/or getting dropped/blocked by the PAN.

Regards,

[Arnesh]

Hi @Sulaiman.Ashraf 

I agree with @OtakarKlier. You can check the logs (system & traffic) to understand why the connection is not getting established.

The other thing which I would suggest is to take the packet capture with the IPSec traffic. If required, you can run the test commands on the CLI to initiate the connection at the same time when you are capturing packets. You can follow this article. 

Another article which is helpful - How to check Status, Clear, Restore, and Monitor an IPSec VPN Tunnel

Regards,

[Sulaiman.Ashraf]

Thanks for response, I have been looking at logs and connectivity, I could not find any issue,

Can you please review attached cli logs and packet captures, let me know if that helps in  finding the issue?

[OtakarKlier]

Hello,

I think its in your tunnel config somewhere. Double check to make sure every setting is identical on both sides.

Regards,

[Sulaiman.Ashraf]

Thanks all, the issue is resolved -- I actually found the issue in routing on connected routers, for some reason default route was dropping traffic even though the destination was pingable.