OCI PA vm unable to communicate outside

[asankacgl]

Hi, I am a newbie for PA and need of some assistance in configuring PA VM on OCI.

I have done the basic configuration Created Zones and Virtual routes etc.

I need to create a IPSec VPN from OCI PA VM to OCI VPN (Not a PA VM) setup on a another tenancy. Both configuration identical except for IP address. Added rules to allow all and a NAT towards the  Untrusted zone from trusted zone. In untrusted routing table I have added the default route as well.

But from OCI VPN side it says there has not bee any communication received from the PA vm.

I am not sure if this has any relevance at all, but what I noticed was; unless I specify an interface the ping does not work (not sure if this is how things should work).

Please let me know what that I could provide to find a solution.

Thank you and Regards

Asanka

[JayGolf]

Hi @asankacgl ,

Can you share your system logs pertaining to the VPN tunnel to the other OCI tenant? You can go to Monitor -> System -> and search "(subtype eq vpn)". Please obfuscate any IPs.