Site-to-Site VPN Fails in AWS

[karimkalunga]

I have setup VPN tunnel on VM-Series Next-Gen Virtual Firewall w/ Advanced Security Subs (PAYG) in AWS with a remote site. I am having issues to establish VPN tunnel, log shows that phase 1 & 2 is loaded. For testing purposes, I have created one policy rule to allow any traffic to pass, I believe at least phase 1 should be up. I hope someone can assist to point me what I might be doing wrong from attached screenshots.

[kiwi]

Hi @karimkalunga ,

I'd start by checking the connectivity issues between VPN peers including packet capture to isolate the issue further.

The logs seems kinda scarce to identify the root issue at the moment.

Can you debug further ?
https://live.paloaltonetworks.com/t5/support-faq/support-faq-how-to-troubleshoot-ipsec-vpn-connectiv...

Kind regards,

-Kim.

[karimkalunga]

Hi @kiwi, thank you for your prompt reply. I have an interface (different from management interface) that I've assigned a public IP address (Elastic IP) which is my peer IP. This peer IP is somehow not reachable from remote site but its public. Two other private interfaces connected to my nodes, other phase 1 configurations are the same on both sites.