Comments

• I was almost 100% certain I did but apparently I clicked on the "Allow Fragmented Packets" check box. That was it! Thanks a million!

  in Permitting ICMP on a virtual interface across an IPSec tunnel on the remote network Comment by Tytec January 23
• @BWC 😋

  in Drop Code: 448 (SA not found on lookup by SPI for outbound pkt), Module ID: 20 (ipSec) Comment by Tytec March 2023
• Thanks everyone for your feedback! Decided to reboot the far end (RV340) as a last resort. Post reboot traffic is passing as it should. I can't explain this anomaly but have to believe a service, process, or similar was hosed in the RV340.

  in Drop Code: 448 (SA not found on lookup by SPI for outbound pkt), Module ID: 20 (ipSec) Comment by Tytec March 2023
• @Arkwright , I see zero traffic ingress(WAN IPSec tunnel) on the NSa to the SSLVPN subnet from the RV340. When I generate traffic sourced from the SSLVPN network, I get the following error on the NSa. I've found that RV340 has very limited visibility and functionality in terms of troubleshooting. Thanks,

  in Drop Code: 448 (SA not found on lookup by SPI for outbound pkt), Module ID: 20 (ipSec) Comment by Tytec March 2023
• Double checked in both NSa and RV340 logs and don't see anything related to the IPSec tunnel or SAs

  in Drop Code: 448 (SA not found on lookup by SPI for outbound pkt), Module ID: 20 (ipSec) Comment by Tytec March 2023
• It has negotiated SAs but for security I didn't show them in the snip. Sorry for not saying that prior. It could be possible but I don't see any errors. I would need to make a change after hours on both units to that that.

  in Drop Code: 448 (SA not found on lookup by SPI for outbound pkt), Module ID: 20 (ipSec) Comment by Tytec March 2023
• yes sir, on the NSa is a 255.255.255.128 and on the Cisco is a /25. From Cisco end:

  in Drop Code: 448 (SA not found on lookup by SPI for outbound pkt), Module ID: 20 (ipSec) Comment by Tytec March 2023
• Correct

  in Drop Code: 448 (SA not found on lookup by SPI for outbound pkt), Module ID: 20 (ipSec) Comment by Tytec March 2023
• Thanks BWC. Yes to answer your questions. The far end is configured and aware of the SSLVPN networks.

  in Drop Code: 448 (SA not found on lookup by SPI for outbound pkt), Module ID: 20 (ipSec) Comment by Tytec March 2023
• Thanks Larry! We are running 6.5.x.x code (from the document looks very similar to v7) and I don't see a place within SonicOS to configure authentication method, username / pw, encryption type, and encryption key. NSa: PRTG:

  in NSa SNMPv3 with PRTG Comment by Tytec February 2023
• Thanks for your reply! It is working as needed. I was just wanting to know why I couldn't configure it as a /32 and if I was doing something wrong.

  in NSA, TZ, & SOHO Loopback Interface Configuration Comment by Tytec January 2023
• Thanks a million! I've dug into both the CLI and GUI white pages and don't see any documentation on that.

  in SWS14-24FPOE Switch--Can you change the default mgmt vlan to something other than 1?? Comment by Tytec October 2022
• Sorry for the broken english in the original post. Hey everyone, Just shaking a SWS14-24FPOE with firmware version v1.2.0.0-5 down and was wondering if its possible to change the management vlan to something other than vlan 1? I've had zero success via the CLI or GUI. Thanks in advance!

  in SWS14-24FPOE Switch--Can you change the default mgmt vlan to something other than 1?? Comment by Tytec October 2022
• @Ajishlal & @Larry, Pulled this from the event log this morning. I also revived a notification from TAC that they are actively working on the issue. I'll make sure and post the resolution as soon as one is reached and tested. Thanks for your help thus far! ID-1512 Automatic cloud backup failure - [MSWAPP:FILEUPLOADFAIL].

  in Cloud Backup Failed on SOHO wireless-N running SonicOS Enhanced 6.5.4.10-95n Comment by Tytec June 2022
• @Ajishlal Will do👌

  in Cloud Backup Failed on SOHO wireless-N running SonicOS Enhanced 6.5.4.10-95n Comment by Tytec June 2022
More Comments