Client ikemgr phase 1 failure

manninegi1985 — Fri, 19 May 2023 23:11:51 GMT

Dear All,

Below is summary of issue and resolution.

1. We added a new firewall to HA set-up.

2. HA was established properly.

3. While doing config sync from active to passive it was falling with error Client ikemgr phase 1 failure

Resolution:

Upon deep dive it was figure out that Master key between Active and passive firewall is mistmached.

Push the correct Master key from Panorama to Passive firewall.

Issue is fixed.

Tip:

If Panorama is running in the environment, best practice is to go to Panorama-> Managed Devices-> Summary

compare all the fields and check the status of all fields are ok or not.

While adding a , config sync was failing from active to passive firewall.

Re: Client ikemgr phase 1 failure

S.Cantwell — Thu, 25 May 2023 22:46:00 GMT

Good info and I am glad you resolve your issue.