Sophos Firewall

Discussions Site2Site Tunnel up but no traffic

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 3 replies
Subscribers 26 subscribers
Views 1105 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Site2Site Tunnel up but no traffic

GernotMeyer over 3 years ago

Hi all,

we have couple of Site2Site Tunnel XG-2-XG. All fine.

Only one tunnel troubles:

It shows green (up) but traffic stops randomly after days. Shutting down and restart the Tunnel and data flow is up again.

I sometimes get error in the system log: "received IKE message with invalid SPI (36B7F81E) from other side".

But I am unable to see, that these error belong to my problem tunnel (or another one).

1. Question: Where can I dig into any protocol log? The web log is not really helpfull.

2. Question: Any ideas how to solve?

Tunnel is with preshared key, policy is "Default Head Office".

Thanks for hints Gernot

This thread was automatically locked due to age.

Parents

0 Bharat J over 3 years ago

Hi GernotMeyer,

Please make LAN-VPN and VPN-LAN firewall are created. To check the connectivity please check ping is tick mark under System --->Administration --->Device access for LAN and VPN Zone.

For tunnel getting disconnect issue please verify the configuration for HO and BO as per the below link :

https://support.sophos.com/support/s/article/KB-000035717?language=en_US

Regards

"Sophos Partner: Infrassist Technologies Pvt Ltd".

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Bharat J over 3 years ago

Hi GernotMeyer,

Please make LAN-VPN and VPN-LAN firewall are created. To check the connectivity please check ping is tick mark under System --->Administration --->Device access for LAN and VPN Zone.

For tunnel getting disconnect issue please verify the configuration for HO and BO as per the below link :

https://support.sophos.com/support/s/article/KB-000035717?language=en_US

Regards

"Sophos Partner: Infrassist Technologies Pvt Ltd".

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 GernotMeyer over 3 years ago in reply to Bharat J

Hi,

thanks for answer. Don't sure that you understand right. Tunnel is working in general! Data flow stops randomly (after days or a week). Tunnel keeps up but no data flows any more. Tunnel down and up and data flow starts again...
Cancel
Vote Up 0 Vote Down

Cancel
0 Bharat J over 3 years ago in reply to GernotMeyer

Hi GernotMeyer,

Please share the IPSec VPN Policy you have applied in each location to verify

To troubleshoot the issue you may refer the below link and start saving the logs to find the root causing the issue :

https://support.sophos.com/support/s/article/KB-000038566?language=en_US

Thanks and Regards

"Sophos Partner: Infrassist Technologies Pvt Ltd".

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Share Feedback

×

Submitted a Tech Support Case lately from the Support Portal?