TUNNEL STATUS RED AWS PAN TO ONPREM PAN

[M.Cipriano]

Hi Guys,

Need your help, as I cannot figured out what's wrong with my configuration. Both side of my Phase 1 are working fine but when it comes to Phase 2 connection is not complete. Any idea how to fix this issue?

Here is my AWS PAN configuration. Please note that my local IP is a private IP address which is I think due to being a VM PAN but I associate it an Elastic IP address. But when I used the elastic ip address as a local ip address ike status got down.

Thank you in advance for your assistance.

[Raido_Rattameister]

Generate traffic on AWS side and then check System logs on Palo.

You can use filter below to see only VPN events.

( subtype eq vpn)

Do you have NAT-T enabled on IKE gateway? (IP on your side is not public IP).

Does it work if you delete proxy id's on Palo side?

[M.Cipriano]

Hi,

I already resolved the issue. Anyway, thanks for the response.