How Do I Send an Extended Ping to the Remote Firewall?

Once you have a VPN configured, the best exercise is to perform an extended ping, sourced from the trusted interface of the local gateway, destined to the trusted interface of the remote gateway. Then check the event log and debugs on the device that received the IKE phase 1 request.

To send an extended ping to the remote firewall, perform the following steps:

From behind the local firewall, open the command prompt.

  Enter   ping [ip address] count [ping count] from [from source interface]  ; press ENTER.

In this example, 192.168.1.1 is the trusted interface for the remote firewall and the count is 75. Enter escape sequence to stop the command process.

A typical reply is:

 

Sending 75, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds from trust !!!!!!!!!!!!!

Success Rate is 100 percent (75/75), round-trip time min/avg/max=3/3/15 ms

 

Troubleshooting