Troubleshooting
Refer to this section to resolve frequently encountered issues while creating route-based VPN topologies.
Tunnels in route-based VPN topologies are not operational.
-
Situation: In Monitoring view, a topology appears as non-operational.
-
Cause: If the topology includes SNS firewalls with network configurations that SMC does not manage, it is possible that not all the virtual IPsec interfaces were created manually on the firewalls in question.
-
Solution: Ensure that all the virtual IPsec interfaces were created on the firewalls. To see the list of firewalls in the topology with network configurations that SMC does not manage, refer to the Network managed by SMC column during the selection of peers for a topology. To access this step, in Configuration > VPN topologies, double-click in the Peers column of the topology in question.
For more information, refer to Configuring a route-based mesh topology and Defining IPsec VTIs on SNS firewalls.