SRX

I setting up my frist dynamic vpn on a srx device. I keep running into Error 1419. I have read the following KB articles but I can't figure out what I setup incorrectly.I haven't tried to setup debugging on IKE yet because I don't really know what i would even been looking for in a detailed log.  I would appreciated if someone could take a quick look at my config. 

Dynamic VPN: 'IKE Negotiations Failed' reported on Access Manager client

Example: Configuring Dynamic VPN

Attachment(s)

configuration05062014.txt   8 KB 1 version

I have gone through all the examples I can find but I still can't figure out what I have setup inncorrectly. I have tried rerunning the wizard and still no luck. I created detail logs from pulse but I am having trouble understanding them.

Attachment(s)

detaillogs.txt   50 KB 1 version

Hi Splendor,

Configuration looks good.

Are you using X.x.x.x to get connected from pulse client?

Try Pulse version prior to 5.0R3 and verify the connection.

is the pulse client , prompting for user authentication?

Regards,
rparthi

Hello! Thank you so much for the help!

I was using on of the y.y.y.y/29 addresses. I use the x.x.x.x/30 for general office traffic and the y.y.y.y/29 for mail, web and ftp servers. I will give it a try on the x.x.x.x address.

I will try downloading a older version of pulse.

Yes pulse asks the user for their username and password once when the connection is intially setup.

Thanks again for your help!

Hi,

Thanks for the update.

Trying with X.X.X.X address and update me the result.

Regards
rparthi

[Please Mark My Solution Accepted if it Helped, Kudos are Appreciated Too] .....

You sir an a gentlemen and a scholar. Thank you so much! Using the x.x.x.x address solved all the problems. I don't know why I never thought about it 😕

Hi Splendor,

Could you mark this as accepted solution so that this query can be closed.

Thanks & Regards,

rparthi

[Please Mark My Solution Accepted if it Helped, Kudos are Appreciated Too] .....

Solution Marked, Thank you so much.

Just a note encase anyone looks at my config I posted, I had to change the order of the security policies to prevent the SRX from trying to pipe everything into the vpn tunnel. My policy for Internet_to_Internal had to be above my policy_in_wizard_dyn_vpn.