I'm having problem with a site-to-site. I think I have the basic setup working and I want to confirm that the tunnel is up and working. Here is what I have:

vyos@<vpnxy>:~$ show vpn ipsec sa
Peer ID / IP                            Local ID / IP
------------                            -------------
<other endpoint>              

    Tunnel  State  Bytes Out/In   Encrypt  Hash    NAT-T  A-Time  L-Time  Proto
    ------  -----  -------------  -------  ----    -----  ------  ------  -----
    1       up     0.0/0.0        3des     sha1    yes    1289    3600    all


This seems to indicate to me that the tunnel is up, only no traffic is flowing through it which I guess means that we aren't looking for a problem in VPN setup but rather in routing or natting somewhere?

Is this a safe conclusion or can there still be VPN problems that causes the lack of traffic and if so how can Ieffectively troubleshoot them?


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.