ScreenOS Firewalls (NOT SRX)
Reply
New User
Pehan
Posts: 2
Registered: ‎09-26-2008
0
Accepted Solution

NS 5GT vs. DrayTek Vigor 2900VG

Hello good people!

I'm trying to set up a VPN between a DrayTek Vigor 2900VG and a NetScreen-5GT. 

After much trial and error I have managed to get them to go through phase1 and (semingly) phase2: 

2008-09-26 13:55:23 info IKE<172.30.3.121> Phase 2 msg ID <ca91cb2f>: Completed negotiations with SPI <c8dced6a>, tunnel ID <4>, and lifetime <3600> seconds/<0> KB. 2008-09-26 13:55:23 info IKE<172.30.3.121> Phase 2: Initiated negotiations. 2008-09-26 13:55:23 info IKE<172.30.3.121> Phase 1: Completed Main mode negotiations with a <28800>-second lifetime. 2008-09-26 13:55:22 info IKE<172.30.3.127> >> <172.30.3.121> Phase 1: Initiated negotiations in main mode.

 

However, the tunnel never comes active. 

Where do I start to fix this? Please advice!

New User
Pehan
Posts: 2
Registered: ‎09-26-2008
0

Re: NS 5GT vs. DrayTek Vigor 2900VG

Update:

Seems like it may have been the Vigors fault..  I tried "dialing" in to the Vigor instead of  "dialing" out, and that did the trick. VPN is up and running. :smileyvery-happy:

 

 

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.