debug vpn ikev2 on gaia embedded appliances - Invalid key exchange payload

andy_currigan — Thu, 02 Nov 2023 17:09:30 GMT

We need to debug a vpn that do not come up, on the smartlog we get an "Invalid key exchange payload message" and on "vpn tu" we see different SA for the same peer IP.

we did not change nothing on our side and same on the 3rd party peer.

how can we investigate an ikev2 vpn on an checkpoint 1600 appliance with gaia embedded?

is there an ikeview tool like for ikev1 vpn?

thanks.

Re: debug vpn ikev2 on gaia embedded appliances - Invalid key exchange payload

PhoneBoy — Thu, 02 Nov 2023 19:02:03 GMT

Debugging VPN issues on SMB appliances: https://support.checkpoint.com/results/sk/sk62482
The format should be the same as for regular gateways, thus IKEview should be usable.

topic Re: debug vpn ikev2 on gaia embedded appliances - Invalid key exchange payload in Firewall and Security Management

debug vpn ikev2 on gaia embedded appliances - Invalid key exchange payload

Re: debug vpn ikev2 on gaia embedded appliances - Invalid key exchange payload