- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
04-07-2020 08:49 AM - edited 04-07-2020 09:36 AM
I'm very new to PAN equipment and am trying to get a site-to-site VPN setup on a PA-820 running 8.0.2 but am running into a pair of similar errors when trying to configure the IKE gateway.
The following commands:
set network ike gateway XY1-Z1 peer-id type ipaddr
set network ike gateway XY1-Z1 peer-id id 11.22.33.44
Both result in the same error:
Server error : peer-id constraints failed : the peer ID type and value must be specified
Similarly, these two commands:
set network ike gateway XY1-Z1 local-id type fqdn
set network ike gateway XY1-Z1 local-id id my-super-slick.fqdn
Both result in the same error:
Server error : local-id constraints failed : the local ID type and value must be specified
All of the other commands I'm running before and after those execute fine. I've done my best to scrutinize the syntax and manually verified via tab completion but I can't figure out what's wrong and I'm hard pressed to find solid CLI examples online to confirm see what might be different. (Link 1; Link 2)
Any thoughts on what I'm doing wrong (e.g.: order of operation) or missing is greatly appreciated.
Many thanks in advance!
04-08-2020 04:41 AM
Hi @JuliusPIV ,
I think you'll need to combine the type and id in one command ... like this:
set network ike gateway XY1-Z1 peer-id type ipaddr id 11.22.33.44
That seems to work for me.
Hope this helps.
-Kiwi.
04-08-2020 04:41 AM
Hi @JuliusPIV ,
I think you'll need to combine the type and id in one command ... like this:
set network ike gateway XY1-Z1 peer-id type ipaddr id 11.22.33.44
That seems to work for me.
Hope this helps.
-Kiwi.
04-08-2020 06:36 AM
Excellent - that is correct thank you so very much!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!