Restart is disabled because no ike sa was established

[MP18]

We have IPSEC tunnel to vendor.

Tunnel is up 

Gui shows Phase 1 is red.

I can ping the IP on the tunnel on vendor side  which is Gateway for Vendor LAN.

Unable to ping the LAN IP on vendor side.

PA shows traffic is passing but nothing coming back from vendor LAN?

[MP18]

Now phase 1 is green still can not ping lan ip on vendor side.

[OtakarKlier]

Hello,

Does the vendor allow the Ping? Do you allow it via a security policy and by inteface management policy?

Regards,