On this page

Show all

Help Center/ Virtual Private Network/ FAQs/ VPN Negotiation and Interconnection/ What Should I Do If My Firewall Cannot Receive Response Packets from a Huawei Cloud VPN Subnet?

What Should I Do If My Firewall Cannot Receive Response Packets from a Huawei Cloud VPN Subnet?

Updated on 2023-10-20 GMT+08:00

View PDF

Check the routes, security policies, NAT configuration, interesting traffic, and negotiation policies for phase 2 negotiation on the on-premises gateway device.
- Route configurations: Route the data for accessing cloud subnets to tunnels.
- Security policies: Allow traffic from on-premises subnets to cloud subnets.
- NAT policies: Do not perform source NAT on the traffic originated from on-premises subnets to cloud subnets.
- Interesting traffic: The interesting traffic configurations at both ends are reversed at the two ends of a VPN connection. The address object name cannot be used for the interesting traffic configured using IKEv2.
- Negotiation policies: Ensure the negotiations policies, especially PFS, at both ends are the same.
After confirming that both phase 1 and phase 2 negotiations are normal, ensure that the security groups on the cloud permit ICMP packets originated from on-premises subnets to cloud subnets.

Parent topic: VPN Negotiation and Interconnection

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel