VPN tunnels on a ubiquiti wireless connection

[infotech]

I have been able to create a vpn tunnel between a PA 3020 and an Cisco ASA 5505, but I am having issues getting a tunnel to come up on a ubiquiti wireless connection. I have checked and the wireless is working fine, it worked before I replaced my cisco asa 5510. Any idea what to check would be helpfull

[sraghunandan]

Following document will help a great deal

https://live.paloaltonetworks.com/docs/DOC-3671

[HULK]

Are you able to see any VPN related logs in PAN firewall  under Monitor >> System: The system LOGS should show Phase-I and Phase-II negotiation information in details.

1. What mode you have configured for this IpSec tunnel , main or aggressive..?

2. Do you have a Public IP address on both side gateway's...?

3. Do you have a policy to allow IKE from Untrust zone to establish this VPN tunnel...?

3. You can also make the PAN as a VPN responder as mentioned below.

Hope this helps.

Thanks

[infotech]

Are you able to see any VPN related logs in PAN firewall  under Monitor >> System: The system LOGS should show Phase-I and Phase-II negotiation information in details. No I do not see any VPN information in the logs for the wireless

1. What mode you have configured for this IpSec tunnel , main or aggressive..?

      auto

2. Do you have a Public IP address on both side gateway's...?

     Its configured as layer two but using a virtual router to route out through a public ISP address going to another public IP address on the peer side

3. Do you have a policy to allow IKE from Untrust zone to establish this VPN tunnel...? Yes

3. You can also make the PAN as a VPN responder as mentioned below

[infotech]

Very good information thanks

[pulukas]

You can check your configuration against this document outlining how to setup IPSEC VPN when the PA is in Layer 2 mode.

Configuring Site to Site IPSec VPN in Layer 2