Packets lost between sites even IPSec VPN tunnel UP

Products

• VMware NSX

Issue/Introduction

• IPSec VPN service configured on Tier-1
• Local and Remote subnet are configured correctly
• IPSec VPN Tunnel UP
• Packets lost between Local and Remote subnets

Environment

VMware NSX

Cause

Gateway Firewall Drops the packets between Local and Remote subnets

Resolution

Modify the Gateway firewall rules to allow the traffic between Local and Remote subnets

Additional Information

NSX Trace flow would be helpful to determine where the packets are dropped