Good evening,
I have built out an IPSEC tunnel for VTI. The tunnel is up, the interfaces are up, the gateways are up.
Lets call them SITEA and SITEB both with HA (active-passive)
I have created an SDWAN policy route on each end, but I cannot ping between sites. If I make a manual route, it works fine, so I believe I can rule out firewall rules, etc.
Packet capture at SiteA shows the ping leaving SiteA. The packet capture on SiteB shows the ping arriving, but the ping response is routed out the WAN.
I have already
- set routing sd-wan-policy-route system-generate-traffic enable
- set routing sd-wan-policy-route reply-packet enable
- system route_precedence set sdwan_policyroute vpn static
My policy route is set to any interface, any source, to destination network.
It all looks like it should be working, but it is not. Any ideas?
Thanks,
Brent
This thread was automatically locked due to age.
