ScreenOS Firewalls (NOT SRX)
ScreenOS Firewalls (NOT SRX)

NS 5GT vs. DrayTek Vigor 2900VG

09.26.08   |  
‎09-26-2008 04:59 AM

Hello good people!

I'm trying to set up a VPN between a DrayTek Vigor 2900VG and a NetScreen-5GT. 

After much trial and error I have managed to get them to go through phase1 and (semingly) phase2: 

2008-09-26 13:55:23 info IKE<> Phase 2 msg ID <ca91cb2f>: Completed negotiations with SPI <c8dced6a>, tunnel ID <4>, and lifetime <3600> seconds/<0> KB. 2008-09-26 13:55:23 info IKE<> Phase 2: Initiated negotiations. 2008-09-26 13:55:23 info IKE<> Phase 1: Completed Main mode negotiations with a <28800>-second lifetime. 2008-09-26 13:55:22 info IKE<> >> <> Phase 1: Initiated negotiations in main mode.


However, the tunnel never comes active. 

Where do I start to fix this? Please advice!

ScreenOS Firewalls (NOT SRX)

Re: NS 5GT vs. DrayTek Vigor 2900VG

09.26.08   |  
‎09-26-2008 12:44 PM


Seems like it may have been the Vigors fault..  I tried "dialing" in to the Vigor instead of  "dialing" out, and that did the trick. VPN is up and running. :smileyvery-happy: