topic Re: ike-generic-event-remote address mismatched. db=49.224.86.11[24497], act=49.224.86.11[4173]' in General Topics

ike-generic-event-remote address mismatched. db=49.224.86.11[24497], act=49.224.86.11[4173]'

inderjit21 — Fri, 07 Apr 2017 01:19:03 GMT

Trying to establish ipsec tunnel comes up and then disconnects after above msg.

Other side has roming sim in the 4g router.

What does db and act means.

I have tried enabling NAT-T on my side but didnt help.

TranceforLife — Fri, 07 Apr 2017 07:46:42 GMT

NAT-T has to be enabled from the both sides @santonic is it correct? Let the remote side to initiate a tunnel, put your Palo into the "passive" mode.

Give us a little bit more logs:

> tail lines 50 mp-log ikemgr.log

santonic — Fri, 07 Apr 2017 08:02:32 GMT

Yeah, NAT-T has to be configured on both sides. but this isn't the issue here (yet).

PA is telling you it can't find IKE config for that IP address (which makes sense as you' will have dynamic address when roaming).

Change config to dynamic IP for peer and passive mode like @TranceforLife suggested..