网络安全与技术
网络安全与技术

求助!!netscreen ssg5 与juniper SRX 220h2 创建vpn创建不成功

修改时间 ‎09-30-2014 09:22 AM

求助各位朋友:

  有没有朋友遇到下面这种情况?

  在两个型号分别是netscreen ssg5 和juniper SRX 220h2上创建基于路由的VPN时失败,在设备ssg5的事件日志查看到下面列出的日志:(而另外将SRX 220h2分别与另两台ssg5创建基于路由的VPN又能成功建立。)

 

2014-09-22 11:40:06 info Rejected an IKE packet on ethernet0/0 from 192.168.20.254:500 to 192.168.30.254:500 with cookies 03db2c0415745d29 and 39ce003c0c8bbe7a because There was a preexisting session from the same peer.
2014-09-22 11:40:06 info IKE 192.168.20.254: Phase 2 msg ID 2100b1f8: Responded to the peer's first message.
2014-09-22 11:40:06 info IKE 192.168.20.254: Received initial contact notification and removed Phase 1 SAs.
2014-09-22 11:40:06 info IKE 192.168.20.254吐舌表情hase 1: Completed Main mode negotiations with a 28800-second lifetime.
2014-09-22 11:40:06 info IKE 192.168.20.254: Received initial contact notification and removed Phase 2 SAs.
2014-09-22 11:40:06 info IKE 192.168.20.254:Received a notification message for DOI 1 24578 INITIAL-CONTACT.
2014-09-22 11:40:06 info IKE 192.168.20.254吐舌表情hase 1:The symmetric crypto key has been generated successfully.
2014-09-22 11:40:06 info IKE 192.168.20.254: Phase 1: Responder starts MAIN mode negotiations.
2014-09-22 11:39:58 info IKE 192.168.20.254: Phase 2 msg ID c871d6a6: Responded to the peer's first message.
2014-09-22 11:39:58 info IKE 192.168.20.254: Received initial contact notification and removed Phase 1 SAs.
2014-09-22 11:39:58 info IKE 192.168.20.254: Phase 1: Completed Main mode negotiations with a 28800-second lifetime.
2014-09-22 11:39:58 info IKE 192.168.20.254: Received initial contact notification and removed Phase 2 SAs.
2014-09-22 11:39:58 info IKE 192.168.20.254: Received a notification message for DOI 1 24578 INITIAL-CONTACT.
2014-09-22 11:39:58 info IKE 192.168.20.254: phase 1:The symmetric crypto key has been generated successfully.
2014-09-22 11:39:58 info IKE 192.168.20.254: Phase 1: Responder starts MAIN mode negotiations.
2014-09-22 11:39:48 info IKE 192.168.20.254: Phase 1: Discarded a second initial packet, which arrived within 5 seconds after the first.
2014-09-22 11:39:46 info Rejected an IKE packet on ethernet0/0 from 192.168.20.254::500 to 192.168.30.254:500 with cookies e454e3f78aa1799c and ed8e53025878ee21 because There was a preexisting session from the same peer.
2014-09-22 11:39:46 info IKE 192.168.20.254: Phase 2 msg ID 2d732089: Responded to the peer's first message.
2014-09-22 11:39:46 info IKE 192.168.20.254: Received initial contact notification and removed Phase 1 SAs.
2014-09-22 11:39:46 info IKE 192.168.20.254吐舌表情hase 1: Completed Main mode negotiations with a 28800-second lifetime.
2014-09-22 11:39:46 info IKE 192.168.20.254: Received initial contact notification and removed Phase 2 SAs.
2014-09-22 11:39:46 info IKE 192.168.20.254: Received a notification message for DOI 1 24578 INITIAL-CONTACT.
2014-09-22 11:39:46 info IKE 192.168.20.254: phase 1:The symmetric crypto key has been generated successfully.
2014-09-22 11:39:46 info IKE 192.168.20.254: Phase 1: Responder starts MAIN mode negotiations.
2014-09-22 11:39:36 info IKE 192.168.20.254: Phase 2 msg ID b99b59b7: Responded to the peer's first message.
2014-09-22 11:39:36 info IKE 192.168.20.254: Received initial contact notification and removed Phase 1 SAs.
2014-09-22 11:39:36 info IKE 192.168.20.254: Phase 1: Completed Main mode negotiations with a 28800-second lifetime.
2014-09-22 11:39:36 info IKE 192.168.20.254: Received initial contact notification and removed Phase 2 SAs.
2014-09-22 11:39:36 info IKE 192.168.20.254: Received a notification message for DOI 1 24578 INITIAL-CONTACT.
2014-09-22 11:39:36 info IKE 192.168.20.254: phase 1:The symmetric crypto key has been generated successfully.
2014-09-22 11:39:36 info IKE 192.168.20.254: Phase 1: Responder starts MAIN mode negotiations.
2014-09-22 11:39:26 info IKE 192.168.20.254: Phase 2 msg ID 205b724d: Responded to the peer's first message.
2014-09-22 11:39:26 info IKE 192.168.20.254: Received initial contact notification and removed Phase 1 SAs.
2014-09-22 11:39:26 info IKE 192.168.20.254: Phase 1: Completed Main mode negotiations with a 28800-second lifetime.
2014-09-22 11:39:26 info IKE 192.168.20.254: Received initial contact notification and removed Phase 2 SAs.
2014-09-22 11:39:26 info IKE 192.168.20.254: Received a notification message for DOI 1 24578 INITIAL-CONTACT.
2014-09-22 11:39:26 info IKE 192.168.20.254吐舌表情hase 1:The symmetric crypto key has been generated successfully.
2014-09-22 11:39:26 info IKE 192.168.20.254: Phase 1: Responder starts MAIN mode negotiations.