Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.

  • 1.  New router cuts off VPN

    Posted 02-24-2009 06:38

    Our ISP has installed a new router in one of our remote offices.  Even though the IP address has not changed, we are receiving errors when the VPN tries to connect our remote SSG5 to our SSG20.  The event log has the following errors in it:

     

    Rejected an IKE packet on ethernet0/0 from REMOTEIPGATEWAY:500 to SSG20PUBLICIP:500 with cookies (NOMNOMNOMcookies) and 0000000000000000 because an initial Phase 1 packet arrived from an unrecognized peer gateway.

     

    IKE<REMOTEIP> Phase 1: Retransmission limit has been reached.

     

    The new router is a Cisco model.  Troubleshooting steps taken include reboots of all relavent equipment, changing gateway settings on SSG20 to Agressive mode.



  • 2.  RE: New router cuts off VPN
    Best Answer

    Posted 02-24-2009 06:45

    It still looks like the IP address is not what it's supposed to be

     

    can you go to whatsmyip.org and verify that the IP matches with what you think it should be ?

     

     



  • 3.  RE: New router cuts off VPN

    Posted 02-24-2009 08:31
    Our ISP technician misconfigured our new router.