Re: Tunnel created but can't ping other sides

Hi,

From SSG140 - 172.16.10.0

SSG140-> ping 192.168.1.1 from eth0/2

Where Eth0/2 has the IP 70.66.178.165/22 as per the config : set interface ethernet0/2 ip 70.66.178.165/22 . The ping will pick the IP of eth0/2 and shouldn't be cought by the configured ffilters :

set ffilter src-ip 192.168.1.1 dst-ip 172.16.10.1
set ffilter src-ip 172.16.10.1 dst-ip 192.168.1.1

VPN proxy IDs are also configured as set vpn "Site B VPN" proxy-id local-ip 172.16.10.0/24 remote-ip 192.168.1.0/24 "ANY", So traffic traffic should fail in SPI match as well.

Please initiate the traffic from the correct IP (one from 172.16.10.0/24, may be bgroup0) and check the flow basic output.

Thanks,

Vikas