Skip to main content
hbuenafe81
hbuenafe81
Explorer III
May 30, 2024
Solved

ipsec vlan s2s loopback port not responding

  • May 30, 2024
  • 2 replies
  • 4373 views
 

Gentleman,

I need support, show below that port 2601 on server that is map on loopback 10.2.202.10 is getting reset, but going direct to server port is open. 

 

Need some help why going to loopback is resetting. 

ports.png

Best answer by ozkanaltas

Hello @hbuenafe81 ,

 

Can you run these diagnose commands and share the output with us? While running these commands you need to try to access 10.2.202.10:2601

 

 

 

diagnose debug disable diagnose debug flow trace stop diagnose debug flow filter clear diagnose debug reset diagnose debug flow filter dport 2601 diagnose debug flow trace start 100 diagnose debug enable

 

 

 

Also are you sure about, your TCP/2601 service status listening on the server? Can you try this with that command? 

 

execute telnet 10.3.131.120 2601

2 replies

ozkanaltas
ozkanaltasAnswer
Valued Contributor III
May 30, 2024

Hello @hbuenafe81 ,

 

Can you run these diagnose commands and share the output with us? While running these commands you need to try to access 10.2.202.10:2601

 

 

 

diagnose debug disable diagnose debug flow trace stop diagnose debug flow filter clear diagnose debug reset diagnose debug flow filter dport 2601 diagnose debug flow trace start 100 diagnose debug enable

 

 

 

Also are you sure about, your TCP/2601 service status listening on the server? Can you try this with that command? 

 

execute telnet 10.3.131.120 2601

    hbuenafe81
    hbuenafe81Author
    Explorer III
    June 3, 2024

    Gents, 

    need help port suddenly stop working. Below debug for your informations.

     

    log2601.png

     

    regards,

     

     

    ozkanaltas
    ozkanaltas
    Valued Contributor III
    June 3, 2024

    Hello @hbuenafe81 ,

     

    Do you have a VIP configuration related to 10.3.131.120:2601?

     

    If you say yes, can you enter this command in that VIP configuration?

     

    config firewall vip edit "YOUR_VIP_NAME" set arp-reply disable end

     

    If you don't use this VIP you can also delete it. 

      hbuenafe81
      hbuenafe81Author
      Explorer III
      June 3, 2024

      Hi ozkanaltas,

       

      I have multiple entry for on VIP for this 10.3.131.120. although it was working earlier and suddenly stop.. any idea you got base on log provided?

      Terms & ConditionsAccessibility statement