IKE failure on VPN between checkpoint and OCI

[dhueber]

Dear all,

we are currently trying to configure a VPN between our on-prem checkpoint cluster and Oracle Cloud Infrastructure (OCI).

On OCI side the tunnel is shown as up and on the checkpoint console, I do see an IKE SA as well as an IPSec SA.
However when trying to run and SSH, nothing goes through, even if the package looks good:

When looking to the VPN blade logs after deleting the SAs for this gateway, I can see following error message:

Any idea where it could come from or how I could get more information?

Many thanks

David

[PhoneBoy]

You might check this: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
If not, proceed to the troubleshooting article linked at the end of this SK.

[Yuber_Sierra_av]

Hello,

I had a similar issue with OCI, we solved it by changing IKEv2 to IKEv1 in both sides.

[the_rock]

Seen that happen with Azure as well, though ikev2 works well with route-based tunnels.