topic Re: IPSEC VPN in Panorama Discussions

IPSEC VPN

JOBCARRILLO — Wed, 26 Apr 2023 23:00:14 GMT

I am working in a lab with VMware virtual machine and when I do VPN it throws the following error: ike phase 1 negotiation fails as initiator, main mode failed SA: 192.168.1.1[500]-203.0.113.40[500]Due to time.

My firewall B is on another machine with another VM. Can you help me please?

Re: IPSEC VPN

Raido_Rattameister — Thu, 27 Apr 2023 12:46:55 GMT

You need to start troubleshooting from firewall B.

If there is any mismatch then B will sit silent and will not tell "attacker" what config it should change to get successful VPN connection.

As you see initiator only sees "timeout".

Firewall B logs on the other hand will tell you why VPN failed.

Re: IPSEC VPN

OtakarKlier — Fri, 28 Apr 2023 21:04:23 GMT

Hello,

To add to this, I would check the ikev1 configuration on both sides to verify they are identical.

Regards,

Re: IPSEC VPN

akuzhuppilly — Thu, 11 May 2023 06:58:24 GMT

Make sure the reachability is good between both nodes.

If there is NAT involved then enable NAT-T.