Quantcast
Channel: ScreenOS Firewalls (NOT SRX) topics
Viewing all articles
Browse latest Browse all 763

Netscreen route based vpn phase 1

$
0
0

Hi,

I am trying to setup a new VPN, without giving complete segments in the routes.

My goal is to first make the phase 1 up, but it tries to establish for 40 secs and then it goes idel for 10 secs.

I executed debug ike details and results are attached.

Here is the config.

 

#####

set interface redundant2 ip 195.69.8.222/30
set interface ethernet0/6 group redundant2
set interface "tunnel.3" zone "Trust"
set interface tunnel.3 ip 136.157.34.1/24

set ike gateway "BOS-MSP-ISG" address 198.153.3.4 Main outgoing-interface "redundant2" preshare Pwd@123 proposal "pre-g2-aes128-sha"
set vpn "BOS-MSP-ISG" gateway "BOS-MSP-ISG" no-replay tunnel idletime 0 proposal "g2-esp-aes128-sha"
set vpn "BOS-MSP-ISG" id 0xf bind interface tunnel.3
set route 198.153.3.4/32 interface redundant2 gateway 195.69.8.221

########

 

I have not added the remote network under the tunnel.3, before that i want to make sure that phase 1 should comeup

 

Can some one point me to the root cause of the issue.

 

regards

Rajesh


Viewing all articles
Browse latest Browse all 763

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>