topic Re: Quick mode Received Notification from Peer: invalid id information in General Topics

Quick mode Received Notification from Peer: invalid id information

arsathparves — Fri, 13 Jan 2023 07:48:31 GMT

Hi all

We are trying to setup a site to site VPN connection with a Sophos firewall but we are receiving " Quick mode Received Notification from Peer: invalid id information" error on the logs so after re-checking the configurations on both the devices we verified the configurations are the same on both the sides. So any suggestion how to fix this issue ?

And we received the same error message when we tried to setup a Site-to-Site VPN with Opensense firewall as well.

#1530 #Quantum_Sparks

Re: Quick mode Received Notification from Peer: invalid id information

Vincent_Bacher — Fri, 13 Jan 2023 08:07:37 GMT

Hi,

is there a NAT policy which maybe e.g. hides the source ip of the outgoing packet behind gateways external address?
Then the packet does not match the Phase 2 config and is dropped and a rule above this rule would be required to disable nat between both devices communicating thru the tunnel

cheers

Re: Quick mode Received Notification from Peer: invalid id information

G_W_Albrecht — Fri, 13 Jan 2023 08:18:30 GMT

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk108600&partition=Advanced&product=IPSec

Re: Quick mode Received Notification from Peer: invalid id information

arsathparves — Fri, 13 Jan 2023 10:39:18 GMT

NAT is disabled on both the sites still the issue is persisting

Re: Quick mode Received Notification from Peer: invalid id information

Daniel_Kavan — Tue, 14 Feb 2023 13:22:36 GMT

RE: IKEv2

Does Check Point require Phase2 quick mode/Proxy-ID/traffic selectors when connecting to a 3rd party vendor (Palo Alto 7050 10.1.8 in my case)?

Re: Quick mode Received Notification from Peer: invalid id information

arsathparves — Mon, 20 Feb 2023 13:30:49 GMT

No idea but on the new release this is mentioned maybe it will reduce the problems.

Remote Access VPN Strongswan (VPN 3rd party)

Re: Quick mode Received Notification from Peer: invalid id information

Daniel_Kavan — Mon, 06 Mar 2023 13:27:13 GMT

Thanks, We were able to get it going from tips here.

https://community.checkpoint.com/t5/Security-Gateways/Site-to-Site-VPN-between-Checkpoint-and-Palo-Alto-Firewalls/td-p/15935