topic IKE failure - no response from peer in Firewall and Security Management

IKE failure - no response from peer

Casey — Tue, 25 Feb 2020 04:17:28 GMT

Hi there,

I would like create IPsec from checkpoint to transit gateway, but I got following error msg 'IKE failure' and 'no response from peer'. (please see the screenshot)

I would really appreciate if someone can help me with this issue.

Thanks a lot.

Casey

Re: IKE failure - no response from peer

_Val_ — Tue, 25 Feb 2020 07:52:49 GMT

Look here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk112054

There are multiple scenarios, some troubleshooting is required. Follow the SK guidance.

Re: IKE failure - no response from peer

Vincent_Bacher — Tue, 25 Feb 2020 08:18:35 GMT

From my perspective and my experience, best next step when facing this message is to consult logs of the peer gateway and perform debug on the peer as well.
In most cases i had there was a mismatch between Phase1 or Phase2 config of the participating gateways and when facing this message i usually find something useful on "the other side"

Cheers
Vincent

Re: IKE failure - no response from peer

Abi — Tue, 04 Oct 2022 22:02:29 GMT

Hi Casey,

how do you resolved this : IKE failure - no response from peer ?

I have similar issue. On my case , it not a routing issue.

Re: IKE failure - no response from peer

simoneciotti — Fri, 02 Feb 2024 11:28:02 GMT

I solved it by changing the VPN Tunnel Sharing from subnet pair to each pair for host in the Tunnel Management

Re: IKE failure - no response from peer

Lesther_Reyes — Tue, 12 Mar 2024 18:33:17 GMT

In my case it happened to me with a Cisco router, the problem was in an ACL on the remote peer, associated with the interface as INBOUND match condition, where the esp 500 udp port was being permit, but it blocked the nat-t 4500 udp and the VPN was armed with NAT-T

We made rules to accept that port but still nothing. Just leaving a rule on the Cisco router like "permit ip any any" everything work.

In your case I see reject...... with checkpoint.