Portal Status Connection initializing

[niuk]

I'm using LSVPN, after rebooting my satellite I can see Portal Status Connection initializing  (Network->IPsec Tunnels->Gateway Info) But nothing happens, in the capture I don't even see actual traffic to portal even if I try to reconnect manually. Please advise

[Sai_Tumuluri]

Hello,

As the satellite in not initiating the connection, I think the problem can one of the following

> Portal IP and local interface on IPsec tunnel on satellite

> Route to portal IP

> Check if there is default deny/clear rule in your security policy

> Please make sure u have policy to allow traffic between between the local IP and portal IP

Please refer to the section "Satellite Configuration" in Large Scale VPN (LSVPN) Deployment Guide for screnshot help

> You can test the routing using the command "test routing fib-lookup ip <IP-address of portal> virtual-router <Virtual router interface>".

Let me know if it helps

[niuk]

Appreciate your suggestions, especially that command to test routing. In fact I removed IPsec config from sattelite and it started to work immediately after I recreated it

[Sai_Tumuluri]

Happy to know config worked. Thank you for choosing Palo Alto Networks. Also let me know if u have any further questions on this discussion

Great day!

Sai