Skip to main content
Version: v25.07.31

CGW Troubleshooting

This document provides steps for troubleshooting and diagnosing CGW configurations. It also contains verification methods for different traffic modes, response validation, and log analysis.

Common Symptoms and Causes​

SymptomPossible Cause
No traffic passing through CGWIncorrect mode selection or configuration error
Traffic not routing as expectedMisconfigured routing rules or incorrect mode setting
Unable to access certain domains/IPsBlocked or unallowed IPs/domains in selective mode
Unexpected traffic behaviorMisconfigured policy settings or local IP routing issues

Troubleshooting Steps​

Cloud Configuration Verification​

Access the CE Terminal​

Log in to the CE (Customer Edge) terminal and gain superuser privileges:

sudo su -

Check the Last Configuration Response​

To confirm the last applied configuration response, run:

cat /tmp/last_config_response.json |jq .gatewayConfig

This command displays the JSON configuration, allowing you to verify settings like gatewayMode, allowedDomains, blockedIPAddresses, and defaultPolicy. For example:

The given one is just an example output; when this command is run, it will show something like this.

Example Response:​

Global​

[
  {
    "translationAddress": "masquerade",
    "ceDeviceIp": "100.100.0.77/30",
    "allowedDomains": [
      "www.google.com"
    ],
    "localSeqId": 19,
    "peDeviceIp": "100.100.0.78/30",
    "gatewayMode": "GLOBAL",
    "blockedIPSubnets": [],
    "blockedIPAddresses": [
      "13.13.13.13"
    ],
    "blockedDomains": [
      "www.facebook.com"
    ],
    "mode": "CE_PEGW",
    "defaultPolicy": "ALLOW",
    "sourceSubnet": [
      "172.30.3.0/24"
    ],
    "zone": "cn",
    "id": 1,
    "allowedIPAddresses": [
      "12.12.12.12"
    ],
    "allowedIPSubnets": [],
    "singleArm": null,
    "cid": 38
  }
]

Full​

[
  {
    "translationAddress": "masquerade",
    "ceDeviceIp": "100.100.0.77/30",
    "allowedDomains": [
      "www.google.com"
    ],
    "localSeqId": 19,
    "peDeviceIp": "100.100.0.78/30",
    "gatewayMode": "FULL",
    "blockedIPSubnets": [],
    "blockedIPAddresses": [
      "13.13.13.13"
    ],
    "blockedDomains": [
      "www.facebook.com"
    ],
    "mode": "CE_PEGW",
    "defaultPolicy": "ALLOW",
    "sourceSubnet": [
      "172.30.3.0/24"
    ],
    "zone": "cn",
    "id": 1,
    "allowedIPAddresses": [
      "12.12.12.12"
    ],
    "allowedIPSubnets": [],
    "singleArm": null,
    "cid": 38
  }
]

Selected​

[
  {
    "translationAddress": "masquerade",
    "ceDeviceIp": "100.100.0.77/30",
    "allowedDomains": [
      "www.google.com"
    ],
    "localSeqId": 19,
    "peDeviceIp": "100.100.0.78/30",
    "gatewayMode": "SELECTED",
    "blockedIPSubnets": [],
    "blockedIPAddresses": [
      "13.13.13.13"
    ],
    "blockedDomains": [
      "www.facebook.com"
    ],
    "mode": "CE_PEGW",
    "defaultPolicy": "BLOCK",
    "sourceSubnet": [
      "172.30.3.0/24"
    ],
    "zone": "cn",
    "id": 1,
    "allowedIPAddresses": [
      "12.12.12.12"
    ],
    "allowedIPSubnets": [],
    "singleArm": null,
    "cid": 38
  }
]
Q:1 What does gatewayMode represent?

Q:2 What does defaultPolicy do?

Q:3 What are the things to keep in mind while verifying JSON output?