There are multiple troubleshooting features available that are explained in this chapter.
Tunnel Service Status
Tunnel status information is sent to Health Monitor Service (HMS), where IPsec Tunnel status is aggregated from all IPsecEP pods. It will go to degraded, if any one of the tunnel status is not-connectedTunnel status is further interpreted based on the aggregation policy and marked as degraded. The composite status is displayed to user.
The following tunnel service statuses are reported:
- Not Ready (status color ORANGE ): Indicates that the service is in the process of being provisioned at the Infoblox POP (service location). This is a one-time state; it will not revert back to this state once it changes.
- Ready (status color ORANGE): Indicates the backend for the tunnel(s) is provisioned, but the link is not physically connected at the customer site. This is a one-time state; it will not revert to this state once it changes.
- Connected (status color GREEN): All tunnels are active and operational on both ends: both the Infoblox PoP and the customer site (router).
- Not Connected (status color RED): Indicates that all tunnels are down.
- Degraded (status color ORANGE): Indicates that there are multiple tunnels to one Availability Zone and one or more (not all) of the tunnels go down, or if any existing tunnel fails, it results in a degraded state. Degradation is based on tunnel metrcis such as latency and packet loss.
