![]() Try to traceroute towards the VPN peer, in our example, use commands: Ensure bidirectional connectivity exists between the VPN gateways. If Phase 1 is down, perform additional checks to identify the reason. The status field has a discrete output which can be either connecting or established.ġ) Established means Phase 1 is up and running. The important field from this particular command is status. Status: connecting, state 3, started 15s ago ![]() ![]() The second VPN tunnel on the list has its selectors in a down state so the focus will be on that tunnel.Īfter the problematic tunnel has been identified, it will be possible to understand the status of phase 1. To do so, type the below command: This article describes techniques on how to identify, debug and troubleshoot issues with IPsec VPN tunnels.Īs the first action, isolate the problematic tunnel.Įnter the VDOM (if applicable) where the VPN is configured and type the command:
0 Comments
Leave a Reply. |