What Should I Do If My Firewall Cannot Receive Response Packets from the Huawei Cloud VPN Subnet?

Check the routes, security policies, NAT configuration, interesting traffic, and negotiation policies for phase 2 negotiation on the on-premises gateway device.
- Route configurations: Route the data for accessing cloud subnets to tunnels.
- Security policies: Allow traffic from on-premises subnets to cloud subnets.
- NAT policies: Do not perform NAT when on-premises subnets access cloud subnets.
- Interesting traffic: Interesting traffic at both ends are configured in the mirrored way. The address object name cannot be used for the interesting traffic configured using IKEv2.
- Negotiation policies: Ensure the negotiations policies, especially PFS, at both ends are the same.
After confirming that both phase 1 and phase 2 negotiations are normal, ensure that the security group rules on the cloud allow the on-premises subnets to access the cloud subnets using ICMP.