Ping Failed (aged out)

[Hayder]

Hello friends,

I configured site-to-site vpn between two firewalls and the ping from network behind firewall (internal network) to other internal network is failed (timeout) while the traffic shows allowed in the firewall logs. The Tunnel is Up and Green status. The configuration is the same on both firewalls and straightforward.

Policy allows all applications

No NAT

Static route between both sites and Peers are pingable

Static route for the internal networks using the Tunnel interface

The Tunnel interface does not have ip address

Dedicate Zone for the S2SVPN

I'm not sure if this is a Routing or Policy issue, but current setting is allowing everything. Please advise if you have seen this scenario before. 

[reaper · Accepted solution]

did you also set a route for the remote network to egress into the tunnel interface on both sides:

are you seein gthe ping arrive on the remote side? if you do, look at the session details if the next hop interface is the correct one etc

[Hayder]

@reaper  Thank you for your response. There was a network issue and firewall configuration was fine.