topic Re: IPSEC association process in PA in General Topics https://live.paloaltonetworks.com/t5/general-topics/ipsec-association-process-in-pa/m-p/30113#M22002 <HTML><HEAD></HEAD><BODY><P>You can expect to see following pcap during the negotiation :</P><P></P><P><IMG alt="ipsec_packets.JPG" class="image-0 jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/18525_ipsec_packets.JPG" style="height: 289px; width: 620px;" /></P><P></P><P>VPN peers will negotiate between configured proposal and match on what is configured on both sides. This is done for both phase 1 and phase 2 respectively. Once you capture the packet, you can expand ISAKMP packets to view each parameters.</P><P></P><P>To view which specific packets are exchanged you can google ipsec phase 1 and phase 2 packets there should be enough information for you. Hope this helps. Thank you.</P></BODY></HTML> Tue, 03 Mar 2015 13:35:29 GMT ssharma 2015-03-03T13:35:29Z IPSEC association process in PA https://live.paloaltonetworks.com/t5/general-topics/ipsec-association-process-in-pa/m-p/30112#M22001 <HTML><HEAD></HEAD><BODY><P>Could someone please help me undersand IPSEC VPN association and message we can see during negotation.</P><P></P><P>Thanks for help.</P></BODY></HTML> Tue, 03 Mar 2015 11:06:30 GMT https://live.paloaltonetworks.com/t5/general-topics/ipsec-association-process-in-pa/m-p/30112#M22001 fatboy1607 2015-03-03T11:06:30Z Re: IPSEC association process in PA https://live.paloaltonetworks.com/t5/general-topics/ipsec-association-process-in-pa/m-p/30113#M22002 <HTML><HEAD></HEAD><BODY><P>You can expect to see following pcap during the negotiation :</P><P></P><P><IMG alt="ipsec_packets.JPG" class="image-0 jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/18525_ipsec_packets.JPG" style="height: 289px; width: 620px;" /></P><P></P><P>VPN peers will negotiate between configured proposal and match on what is configured on both sides. This is done for both phase 1 and phase 2 respectively. Once you capture the packet, you can expand ISAKMP packets to view each parameters.</P><P></P><P>To view which specific packets are exchanged you can google ipsec phase 1 and phase 2 packets there should be enough information for you. Hope this helps. Thank you.</P></BODY></HTML> Tue, 03 Mar 2015 13:35:29 GMT https://live.paloaltonetworks.com/t5/general-topics/ipsec-association-process-in-pa/m-p/30113#M22002 ssharma 2015-03-03T13:35:29Z