Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- 5G/IoT
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma Access Insights
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About Chris.Billett
About Chris.Billett
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
12-15-2020
8Posts
0Likes
0Solutions
Dec 15, 2020Last Visited
User
Activity
User
Profile
Latest posts by Chris.Billett
| Subject | Views | Posted |
|---|---|---|
| 186 | 12-11-2020 08:47 AM | |
| 534 | 12-11-2020 08:09 AM | |
| 542 | 12-11-2020 08:04 AM | |
| 568 | 12-11-2020 07:30 AM | |
| 594 | 12-11-2020 06:35 AM |
User Badges
Public Statistics
| Date Registered | 11-13-2020 04:26 AM |
| Date Last Visited | 12-15-2020 03:51 AM |
| Total Messages Posted | 8 |
12-11-2020
08:47 AM
I've posed the question to my peer. I added this IP as a SAN entry in my CSR but as far as their side im not sure.
... View more
12-11-2020
08:09 AM
Sorry yes, I have also set these to trusted. If i set anything other than the IP address in the Peer Identification field i get the following error received ID_R (type ipaddr [xxx.xxx.xxx.xxx]) does not match peer ID So if i set it back to the IP i then get the cert error
... View more
12-11-2020
08:04 AM
I tried setting the SAN for IP to be that of the remote peer. Im in the process of waiting for a new cert to be signed where the SAN IP is set to the local peer ip as you show in your screenshots.
... View more
12-11-2020
07:30 AM
Ok to go through the motions.. I generated a CSR using my public IP as the CN I sent my CSR to the peer who signed it and sent back their Root, Int CA's and my signed cert I imported all 3 In the IKE setup I set the Cert to be the signed cert I created a cert profile adding both CA's I then set Local Identification to be my DN record of the Cert (as this populate this way) I then set the Peer Identification to be their IP If I change the IP to be something else it fails before the authentication saying the Peer ID they presented didnt match.
... View more
12-11-2020
06:35 AM
New certificate didn't do the trick. PA Support also don't seem to know either 😞
... View more
12-11-2020
12:39 AM
Hi, I can generate a new certificate if required. The issue is that it's looking for the peer id which is an IP address in the SAN. I have added this into the cert and verified its there in the SAN but it still doesn't not get picked up during the phase 1 verification - would it be work adding another san entry like hostname and adding the IP address?
... View more
12-10-2020
07:23 AM
Hi, Im trying to setup a VPN connection using certificate based authentication. When Phase 1 tries to establish I'm getting the following error Peer's ID payload ' IPv4_address:xxx.xxx.xxx.xxx' does not match certificate ID, Error: failed to get subjectAltName. I have added the peer's IP address to the IP(SAN) of the certificate and also tried using 'Permit peer identification and certificate payload identification mismatch' with no luck. Any further suggestions on how to bring up phase 1? Thanks
... View more
11-17-2020
07:22 AM
Hi, My main aim is that I'm trying to setup a VPN between AWS and my VM Series. I so far have my Phase 1 and Phase 2 connections up. My AWS VPN has a static route to the remote CIDR, but when I try and send traffic over this (example ping or ssh to 172.168.1.5 from a server on the AWS side) I see no traffic hitting the the VM series. If I run a traceroute on the server I see it get as far as the local AWS CIDR 169.254.222.244/30 but then don't see anything in the monitor side on the VM series. What areas would i need to check to to either see the traffic attempts or see what could stop it from going over the tunnel? Thanks
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
12-15-2020
03:51 AM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
