Modifying PSK doesn't alter the policy

Teddy_Brewski — Tue, 30 Jul 2019 14:53:15 GMT

Hello,

I have a strange behavior with one of our IPSec tunnels (I get an error about 'possibly a mismatch in pre-shared keys').

When I change the PSK and push the policy with the revision enabled, I receive a notification that no policy was modified hence no revision is possible. The policy installation is successful but I have an impression that the pre-shared key has not been modified since the tunnel is down with the same error.

We're under R77.30 (Take 216) on a open server.

Perhaps it's worth to mention that the affected VPN Community Name was reused. There was an old and unused VPN Community Name, which I renamed and reused for this one. The Shared Secret has been reset since then, and the Peer Name is correct.

Could that be the cause?

I also tried to remove the shared secret, save the policy, set the shared secret and install the policy - still get the same message about no revision.

Thanks.

Re: Modifying PSK doesn't alter the policy

PhoneBoy — Tue, 30 Jul 2019 21:28:41 GMT

That sounds like some sort of corruption and it's a good idea to involve the TAC.

topic Modifying PSK doesn't alter the policy in General Topics

Modifying PSK doesn't alter the policy

Re: Modifying PSK doesn't alter the policy