IPSEC tunnel due to timeout problem

[Amarzaya]

I was configure remote 10 branchs connect to Office by IPSEC tunnel. Each branch connect to Office bandwidth  256kbps,512kbps, 1mbps. So someone branchs tunnel automatic disconnect.

Manual remote tunnel device(Cisco RV042) reconnect  to PA2020 error. See error message

IKE phase-1 negotiation is failed as initiator, main mode. Failed SA: office ip [500]-branchs ip[500] cookie:26566cb2f77429cd:0000000000000000. Due to timeout.

[mharding]

Have you double checked your configuration and the pre-shared key?

Configuring IPSec VPN- Layer 2.pdf

[Amarzaya]

Remote branchs router Cisco RV042 with layer3 interface. VPN Tunnel Layer3 between devices

[treese]

What was the fix on this one?  I'm haveing similiar issue.

Thank you,

[djrodb]

Has anyone got any updates with this?

Our VPNs were working ok one minute an the next we're getting IKE P1 timeout errors and nothing has changed?.....

Thanks

Rod

[djrodb]

Resolved this myself. I created a block all rule which should have been block all from untrusted to trusted zone...

[siebi]

Hi,

I had a similar problem at a customers site. I was changing the udp timeout (default 600) of the ike application to the negotiation timeout plus 30 seconds (I think it was 3630). This was solving the timeout problems.

Best regards,

Florian

[JFonner]

I'll be the guy that responds to a threat that is 12 years old...Any time you see all the zeros and Due to timeout it means the firewall cannot get to the peer ip. Often times this is because of a security policy or a routing issue. But bottom line is phase one cant get there for some reason.