This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IKE Phase 2 fails on Internal Network

Hi all...

My problem is to make a connection over SSH Sentinel with the Astaro 4.015. When i make a dial up connection it works fine. But when i want make a VPN Connection to my Firewall over a NAT Device (Watchguard Firebox) every time the IKE Phase 2 fails.

Someone have an idea?

This thread was automatically locked due to age.

0 Xeno over 21 years ago

Do you have a vIP defined? If using NAT-T you must define a vIP.

Xeno
Cancel
Vote Up 0 Vote Down

Cancel
0 Truth over 21 years ago in reply to Xeno

Yes i have it...

I have give a IP from my LAN Pool...doesnt work... have read in the forum that i dont can give a LAN Pool IP.. ok change the vIP to a non LAN Pool IP.. but the same problem...
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 21 years ago in reply to Truth

Use an IP from a pool not being used anywhere else, ie make a new private IP pool for the vIP.
Cancel
Vote Up 0 Vote Down

Cancel
0 Truth over 21 years ago in reply to Simon Shaw

It's ok... now it works with PSK but not with the Certificate. This is enough for the moment. Now i must look why i cant connect to the servers (i think rulez problem)... Thanks a lot for help...

For other one's that need the solution..

The problem was, that i haven't define the vIP under the Remote Keys for my VPN Connection. This IP must the same like this one that you give in the VPN Client.
Cancel
Vote Up 0 Vote Down

Cancel