topic Re: GRE traffic issue in FTD in Network Security

GRE traffic issue with FTD

Abheesh Kumar — Fri, 21 Feb 2020 16:27:02 GMT

Hi All,

I'am facing an issue regrading GRE traffic in FTD 2110 firewall running 6.2.3.5.

Customer have a contractor team they are using AT&T remote access vpn service that uses GRE tunnel.

I have created a tunnel rule in prefilter policy to fastpath the traffic and i can able to see the traffic as fastpathed in connection events, whenever the user tried to connect and when he enter his credentials it will try to connect and getting connection failed error. If he tried from other network like 4g or Home internet it works well.

Any help to troubleshoot or did i need to configure any other things in FTD to allow GRE traffic

Regards,

Abheesh

Re: GRE traffic issue in FTD

k.nandakumar — Fri, 09 Nov 2018 07:49:51 GMT

What was the Action defined on the Pre-filter rule which you defined for this GRE traffic? is it allow or permit ?

Re: GRE traffic issue in FTD

Abheesh Kumar — Fri, 09 Nov 2018 11:21:52 GMT

Hi Nanda,

I have already created a rule in prefilter for GRE traffic as fastpath. Still the remote access application is not working.

-Abheesh

Re: GRE traffic issue in FTD

k.nandakumar — Mon, 12 Nov 2018 04:08:10 GMT

What's the rule you had defined in the Prefilter for GRE.

Can you get Show run access-list and show access-list from CLI ?

Re: GRE traffic issue in FTD

Abheesh Kumar — Mon, 12 Nov 2018 18:27:08 GMT

Hi,

Issue resolved after adding the GRE traffic in normal pre-filter rule as fastpath not in tunnel rule.