topic Re: IKE failure on VPN between checkpoint and OCI in Firewall and Security Management

IKE failure on VPN between checkpoint and OCI

dhueber — Thu, 04 Aug 2022 13:32:55 GMT

Dear all,

we are currently trying to configure a VPN between our on-prem checkpoint cluster and Oracle Cloud Infrastructure (OCI).

On OCI side the tunnel is shown as up and on the checkpoint console, I do see an IKE SA as well as an IPSec SA.
However when trying to run and SSH, nothing goes through, even if the package looks good:

When looking to the VPN blade logs after deleting the SAs for this gateway, I can see following error message:

Any idea where it could come from or how I could get more information?

Many thanks

David

Re: IKE failure on VPN between checkpoint and OCI

PhoneBoy — Thu, 04 Aug 2022 22:50:27 GMT

You might check this: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk176957
If not, proceed to the troubleshooting article linked at the end of this SK.

Re: IKE failure on VPN between checkpoint and OCI

Yuber_Sierra_av — Fri, 10 Mar 2023 20:54:48 GMT

Hello,

I had a similar issue with OCI, we solved it by changing IKEv2 to IKEv1 in both sides.

Re: IKE failure on VPN between checkpoint and OCI

the_rock — Sat, 11 Mar 2023 03:28:32 GMT

Seen that happen with Azure as well, though ikev2 works well with route-based tunnels.