Make sure some traffic is trying to pass through the tunnel so we know it's trying to re-establish itself.
I will normally utilise vpn tu on the gateway. Make sure to force the tunnel establishment. It's so quick and easy to enable ike debug on the firewalls, and the ike.elg is so small and easy to understand by using IKEview (sk30994) it will often save me a lot of time when I'm confused about why a VPN-tunnel is not working.Ĭonnect to the gateway using SSH and enable IKE debugging:
Have you tried manually installing database on the management server and tried to push policy towards the other gateways making sure everything is aware of the change of hostname and certificates? This is the point where I would simply enable IKE-debug on the affected gateways, grab the ike.elg and inspect it using IKEview from Check Point to get a better understanding of what is going on.
0 kommentar(er)
