VPN between ZyWall 110 and USG 20 is CONNECTED but can't ping

Options
vgudagno
vgudagno Posts: 2 image  Freshman Member
in Security
Hello
I made an IPSEC VPN between a USG110 and USG20, the tunnel connects but the traffic does not pass, if I ping from the firewall console USG20> UG110 I do not receive the same response from USG20> UG110. I have also disabled policy controllers. The strange thing is that I did the configuration months ago and everything was working regularly suddenly it doesn't work anymore. What can I do thanks for the support

All Replies

  • PeterUK
    PeterUK Posts: 4,264 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary

    So its a site to site VPN?

    Are the local and remote policy correct?

    You may need a routing rule for the destination to go down the next hop tunnel


  • MJStar
    MJStar Posts: 37 image  Freshman Member
    First Answer First Comment Friend Collector Fourth Anniversary
    While you ping USG20 to USG110 site and no response from the peer site, are there any logs can be seen on log page(Monitor ->Log)?  Maybe it's a clue.
  • vgudagno
    vgudagno Posts: 2 image  Freshman Member
    Type your don't just log in there
  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,350 image  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fifth Anniversary

    Can you provide those two sites' device config files to us via private message?
    We would like to build a test in our LAB environment to reproduce it.

    image.png

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）