Question

Hello,

I have created an IPSEC tunnel, the SAs come up as expected but no traffic flows, no firewall zone has been defined.

So create a zone, set the permissions as appropriate and the traffic goes through the tunnel. Good.

Now shutdown the tunnel, and restart it later. No traffic, the firewall rules have disappeared. Go to Network->Firewall->General Settings, don't change anything just select Save and Apply. Good again the traffic goes through.

I have missed something or is this the expected behavior ?

Regards,

Answer 1

Hello,

Thank you for contacting.

May i know if you were using the older firmware before and it was working fine?

Or this the 1st time you configured the tunnel on this latest firmware?

Please let me know.

Thanks.

Regards,

Ahmed

Comments

Hello Ahmed,

It was working fine in previous versions.

Regards,

---

Hello,

Could you please share a troubleshoot file for the device in DM.

Thanks.

---

Turn out that the ipsec / vuci scripts don't apply the "Exclude-IPSEC-from-NAT" rule if it is not enabled and the vuci firewall scripts do, even if it isn't enabled.