This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Site to Site IPSEC Tunnel between to UTM9 Firewalls - Tunnels up and ping working but no other traffic

Hello all,

I have established an IPsec tunnel between two sites using a pair of UTM9 appliances. I can ping between subnets on both sides. However, as soon as I try SSH or HTTP to services on the remote subnet communications fail. I have checked the automatic firewall rules and they look fine and allowing traffic in both directions at both sites. I have tried putting in manual rules as well, just to confirm.

It doesn't look like routing issues, because I can ping and firewall rules are okay.

Any help would be appreciated.

Many Thanks

Jamie

This thread was automatically locked due to age.

Parents

0 Argo over 7 years ago

Hi Jamie,

Paste image of the current IPSec connections, both sides, this may provide more information.
Cancel
Vote Up 0 Vote Down

Cancel
0 Jamie McCarthy over 7 years ago in reply to Argo

Hi Jason,

Thanks for answering.

4 Screenshots attached, hope they make sense.

Thanks again

Head Office IPSEC tunnel to the remote site

Public being my WAN interface

Remote gateway definition at Head office to Dunsfold

Remote IPSEC tunnel to the Head Office

Remote Site (Dunsfold) configuration to the remote gateway at the head office
Cancel
Vote Up 0 Vote Down

Cancel
0 Jamie McCarthy over 7 years ago in reply to Jamie McCarthy

A quick update, I turned on logs on the automatic firewall rules to see if traffic was being dropped across the VPN and I can confirm traffic is being passed and not dropped.

It feels like a routing issue, but I am getting ping responses from devices at both ends.

Not sure what to do next.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 7 years ago in reply to Jamie McCarthy

Hi Jamie and welcome to the UTM Community!

Do #1 in Rulz - I bet you're right that you will conclude again that it's a routing issue, but we need to formally eliminate other possible causes.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 7 years ago in reply to Jamie McCarthy

Hi Jamie and welcome to the UTM Community!

Do #1 in Rulz - I bet you're right that you will conclude again that it's a routing issue, but we need to formally eliminate other possible causes.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data