VPN
-
What is Dead Peer Detection and Tunnel Monitoring across IPSec Tunnel?
•
DPD is a monitoring function used to determine liveliness of the Security-SA (Security Association and IKE, Phase 1) DPD is used to detect if the peer device still has a valid IKE-SA. Periodically, it will send a “ISAKMP R-U-THERE” packet to the peer, which will respond back with an “ISAKMP […]
-
Phase 2 issues – traffic stops but no errors logged in fortigate firewall
•
If you are facing this kind of issue, you should use some cli command to fix issue- You need to first take the packet capture on the FGT side by using the sniffer as below: dia sniffer packet any ” host <DST IP> and icmp ” 4 0 l Can […]
-
Cisco AnyConnect VPN Troubleshooting
•
Scenario 1- Unable to access the VPN website If you cannot access the VPN website https://vpn.techclick.in add itto your trusted sites.At the top of the page, select the “Tools” drop down list.Select “Internet Options”Click on the “Security” tab at the top of the menu box.Select the “Trusted sites” icon at […]
-
SITE to SITE IPSEC VPN PHASE-1 And PHASE-2 Troubleshooting step
•
Troubleshooting ———->>> Four most common issue we generally face — –> Phase 1 (ISAKMP) security associations fail –> Phase 2 (IPsec) security associations fail –> VPN Tunnel is established, but not traffic passing through –> Intermittent vpn flapping and disconnection Phase-1 and Phase-2 configuration should be identical of both side […]