topic Re: Site to site VPN phase one error. in General Topics https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-phase-one-error/m-p/40573#M29807 <HTML><HEAD></HEAD><BODY><P>Hi npare,..</P><P>Thank you,issue got resolved. Issue was due to improper routing .</P></BODY></HTML> Thu, 24 May 2012 12:01:56 GMT Gururaj 2012-05-24T12:01:56Z Site to site VPN phase one error. https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-phase-one-error/m-p/40571#M29805 <HTML><HEAD></HEAD><BODY><P>Hi Team,</P><P></P><P>For Site to Site VPN in System logs showing ( description contains 'IKE phase-1 SA is deleted SA: 10.10.10.1[500]-10.10.10.2[500] cookie:eb16a2088724d32c:0000000000000000.' )</P><P></P><P>Thank you in advance,.</P></BODY></HTML> Tue, 22 May 2012 11:45:12 GMT https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-phase-one-error/m-p/40571#M29805 Gururaj 2012-05-22T11:45:12Z Re: Site to site VPN phase one error. https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-phase-one-error/m-p/40572#M29806 <HTML><HEAD></HEAD><BODY><P>The responder cookie is all zeros which means phase 1 failed early.</P><P><BR />At this point I would advice to look at the other firewall's logs to see what option in phase 1 wasn't allowed. It could be as simple as an IP address mismatch where the peers were defined.</P></BODY></HTML> Tue, 22 May 2012 15:44:37 GMT https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-phase-one-error/m-p/40572#M29806 npare 2012-05-22T15:44:37Z Re: Site to site VPN phase one error. https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-phase-one-error/m-p/40573#M29807 <HTML><HEAD></HEAD><BODY><P>Hi npare,..</P><P>Thank you,issue got resolved. Issue was due to improper routing .</P></BODY></HTML> Thu, 24 May 2012 12:01:56 GMT https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-phase-one-error/m-p/40573#M29807 Gururaj 2012-05-24T12:01:56Z Re: Site to site VPN phase one error. https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-phase-one-error/m-p/40574#M29808 <HTML><HEAD></HEAD><BODY><P>Great, glad to hear the issue is fixed!</P></BODY></HTML> Thu, 24 May 2012 15:29:47 GMT https://live.paloaltonetworks.com/t5/general-topics/site-to-site-vpn-phase-one-error/m-p/40574#M29808 npare 2012-05-24T15:29:47Z