[Nebula] The status of Site to site VPN is up on Nebula but unable to ping the other site
![Zyxel_Kevin](https://us.v-cdn.net/6029482/uploads/defaultavatar/nN4PAQRO7TCNP.jpg)
Zyxel_Kevin
Posts: 855
Zyxel Employee
![](https://us.v-cdn.net/6029482/uploads/userpics/FN0BI9T10CTX/n6O940IZ5DEW6.png)
![100 Answers](https://us.v-cdn.net/6029482/uploads/badges/64OW7WFEOGRW.png)
![Second Anniversary](https://us.v-cdn.net/6029482/uploads/badges/P6A4SUUFXBDU.png)
![500 Comments](https://us.v-cdn.net/6029482/uploads/badges/9QC2L9NOJP6Y.png)
![Zyxel Certified Sales Associate](https://us.v-cdn.net/6029482/uploads/badges/T8OIUCS56TCY.png)
Checking:
1)Firewall will allow related protocol by implicat rule, please ensure you don't have rule block Any to Device
You don't have rule block ESP Protocol from any to Device. Firewall cannot decrypt packets without allowing ESP rule.
2)Check the Private Subnet is reachable.
Tagged:
0
Categories
- All Categories
- 414 Beta Program
- 2.2K Nebula
- 130 Nebula Ideas
- 88 Nebula Status and Incidents
- 5.4K Security
- 166 USG FLEX H Series
- 255 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 999 Wireless
- 36 Wireless Ideas
- 6.2K Consumer Product
- 233 Service & License
- 370 News and Release
- 77 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.9K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 69 Security Highlight