Security Gateway IKEv2 issue

[Ihenock1011]

Hi All,

We have a Checkpoint R81.10 security gateway acting as a site-to-site VPN gateway. We are experiencing issues with IKEv2: although the tunnel is up, the encryption domains are unable to communicate. However, when we change the IKE version from IKEv2 to IKEv1 under the encryption parameters, the end hosts start to communicate via ping or telnet. What could be the issue?

Thanks

[Lesley]

In general IKEv2 is more ''strict'' , could be many reasons why it does not work.

First step would for be to check what the current jumbo take is of fw (cpinfo -y all)

If recent Jumbo is installed check firewall logs for errors related to this vpn.

Final step vpn debug