ozzy

Right,

I'm trying to connect to our office VPN using a laptop running NetScreen Remote.

I've followed all the instructions for the client, but I can't get it too work. It's drving me nuts

This is the contents of the log file:-

12:55:42.311 My Connections\RDF LAN - Initiating IKE Phase 1 (IP ADDR=x.x.x.x)
12:55:42.311 My Connections\RDF LAN - SENDING>>>> ISAKMP OAK MM (SA, VID)
12:55:42.551 My Connections\RDF LAN - RECEIVED<<< ISAKMP OAK MM (SA)
12:55:42.601 My Connections\RDF LAN - SENDING>>>> ISAKMP OAK MM (KE, NON, VID, VID, VID)
12:55:43.042 My Connections\RDF LAN - RECEIVED<<< ISAKMP OAK MM (KE, NON)
12:55:43.072 My Connections\RDF LAN - Using configured machine certificate "Systems Administrator's RDF Group Technical Support ID".
12:55:43.202 My Connections\RDF LAN - SENDING>>>> ISAKMP OAK MM *(ID, CERT, CERT_REQ, SIG, NOTIFY:STATUS_INITIAL_CONTACT)
12:55:43.983 My Connections\RDF LAN - RECEIVED<<< ISAKMP OAK MM *(ID, CERT, SIG)
12:55:43.983 Incorrect Phase 1 ID type (expected ID_IPV4_ADDR):
12:55:43.983 received ID DISTINGUISHED NAME=CN=connection
12:55:44.084 No matching Phase 1 ID received for Policy Entry My Connections\RDF LAN.
12:55:44.084 My Connections\RDF LAN - SENDING>>>> ISAKMP OAK INFO *(HASH, NOTIFY:INVALID_ID_INFO)
12:55:44.084 My Connections\RDF LAN - Discarding IKE SA negotiation
12:55:44.084 MY COOKIE xx xx xx xx xx xx xx xx
12:55:44.084 HIS COOKIE xx xx xx xx xx xx xx xx

Stefan

ozzy

Where's Jeff Wiltshire when you need him?

ozzy

Right, managed to get it working by changing some "SA life" values

Stefan

Jeff Wiltshire

I'm here.....

The log looks like there was a mismatch on the SA between the client & the Netscreen....but you know that already..


I'll get my coat

Jeff