article IKE Gateway Commit Failure: Peer Gateway ID Must Be Defined in Prisma Access Articles https://live.paloaltonetworks.com/t5/prisma-access-articles/ike-gateway-commit-failure-peer-gateway-id-must-be-defined/ta-p/283024 <DIV class="lia-message-template-symptoms-zone"> <H2>Symptoms</H2> <P>When configuring the remote network or service connection the commit fails:</P> <OL> <LI>Commit fails on cloud</LI> <LI>RN or SN fails to spin up on cloud even after 10 min</LI> </OL> </DIV> <DIV class="lia-message-template-diagnosis-zone"> <H2>Diagnosis</H2> <OL> <LI>Please verify the commit failure reason matches the one discussed in the article. Procedure to check the commit failure reason on Prisma Access firewall</LI> <LI>Check the IKE Gateway configuration for the gateway you see commit failure.&nbsp;<A title="Verify Commit Failure Reason On Prisma Access Firewall | LIVEcommunity " href="https://live.paloaltonetworks.com/t5/Prisma-Access-Articles/Procedure-to-Check-the-Commit-Failure-Reason-on-Prisma-Access/ta-p/283222" target="_self">Verify Commit Status</A><BR /> <PRE>Configuration Errors:IKEv1 gateway &lt;gw_name&gt; peer gateway ID must be defined when peer address is dynamic.(Module: ikemgr) </PRE> </LI> <LI>Verify the peer IP type is dynamic</LI> </OL> </DIV> <DIV class="lia-message-template-solution-zone"> <H2>Solution</H2> <P>When the dynamic IP is selected, we do not know the Public IP from which the peer is connecting. IPSec would require authenticating the peer. Due to this reason, we need identification information to be defined under "Local Identification" and "Peer Identification."</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="IKE Gateway Peer Dynamic .png" style="width: 642px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/21055iBE9079662BCE812D/image-size/large?v=v2&amp;px=999" role="button" title="IKE Gateway Peer Dynamic .png" alt="IKE Gateway Peer Dynamic .png" /></span></P> <P>Once the identification is configured, commit and push from Panorama.</P> </DIV> Wed, 25 Sep 2019 15:49:29 GMT Sai_Tumuluri 2019-09-25T15:49:29Z IKE Gateway Commit Failure: Peer Gateway ID Must Be Defined https://live.paloaltonetworks.com/t5/prisma-access-articles/ike-gateway-commit-failure-peer-gateway-id-must-be-defined/ta-p/283024 <P>Learn what to do when configuring the remote network or service connection the commit fails on Prisma Access.</P> Wed, 25 Sep 2019 15:49:29 GMT https://live.paloaltonetworks.com/t5/prisma-access-articles/ike-gateway-commit-failure-peer-gateway-id-must-be-defined/ta-p/283024 Sai_Tumuluri 2019-09-25T15:49:29Z