I have working VPN for Windows machines. I need to extend it for Android devices, using client from Android OS.
I'm using login and passwords (not certs) in my VPN config.
I followed by the GlobalProtect-Config-Android-RevB.pdf - part 3
When I try to start VPN on Sony Ericsson Xperia S smartfon I see connecting and after 2-3 minuts - connection timeout.
On PA in logs I have:
1: (ike-nego-p1-start) IKE phase-1 negotiation is started as responder, aggressive mode. Initiated SA: XXX.XXX.14.140-YYY.YYY.124.120 cookie:010170c511f3d5d2:9d6cb13fb537cabb.
2. (ike-nego-p1-fail) IKE phase-1 negotiation is failed as responder, aggressive mode. Failed SA: XXX.XXX.14.140-YYY.YYY.124.120 cookie:010170c511f3d5d2:9d6cb13fb537cabb. Due to timeout.
3. (ike-nego-p1-delete) IKE phase-1 SA is deleted SA: 18.104.22.168-22.214.171.124 cookie:010170c511f3d5d2:9d6cb13fb537cabb.
My portal has commercial SSL certificate.
I can open portal web page without any cert warning (ssl cert is marked as a green and trusted), so I think that isn't a GP certyficate problem.
I tryed to change user password, IKE secret, group name.
Have you any idea what is wrong in my config?
I cant (officially) upgrade to 4.1.x my smartfon :smileysad:
I alredy read comments, so like other people I need to open case at support.
Thank You for your help
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!