Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 1 reply
  • Subscribers 26 subscribers
  • Views 3928 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec Tunnel routing traffic fine, but flooding log - is this a problem?

Chris Shipley

I've got my newly installed SFOS 16.05-MR7 firmware (on SG230 hardware).  It's connecting to 4 different UTM 9 (all running firmware 9.503-4) systems with IPSec VPN.  All traffic is routing as it is expected to be (for those reading that haven't done this on XG, after configuring VPN you have to set firewall rules).

My IPSec log on my SFOS / XG is being flooded with 17854 logs "EST-P1: System did not accept any proposal received. Need to reconfigure the connection on either ends."  every other second or so, sometimes multiple times per second.  I'm a little confused since the Status says SUCCESSFUL but the Message says that.

Can anyone assist with this behavior? I'd prefer not to have it saying this.  IPSec logs on the UTM9 systems appear standard, all good, no out of the ordinary messages being thrown.

XG IPSec Policy

UTM9 IPSec Policy



This thread was automatically locked due to age.
  • +1

    Eye-roll to myself.  Admittedly, I was working on this rather late last night.  I just changed the UTM9 IPSec Encryption Algorithm to AES 256 (instead of AES 256 CTR) and I'm all set now.  :P  Sometimes just writing it all out makes you see the light.