VPN Stability Issue

[Sanjay_S]

Hi All,

We have a VPN tunnel between R80.10 to R65 Checkpoint devices. The VPN is not stable, we ran the debug during the issue and found that the R65 device is Deleting the Negotiation for Phase 1 at first few times and then it accepts and create the SA.

NegotiationTable::NegotiationUpdated: Updating indices for: 
NegotiationTable::DeleteNegotiation: Invoked for:

>The debug logs from R80.10 says the below:

NegotiationTable::MatchPeerMethodsIDs: No match found.

NegotiationTable::MatchPeerP1Neg: No match found.

However, after few negotiation it will come up automatically. Is there any know limitations in R65?

Thanks in Advance.

[Chris_Atkinson]

R65 has been end of support for a number of years. Is this a gateway managed by a 3rd party?

[Sanjay_S]

Hi Chris,

Gateway is managed by the 3rd party.

[PhoneBoy]

R80.10 supports more encryption methods than R65.
Assuming the VPN community settings match on both ends it should still work.
That said R65 has been End of Support for years now.

[FedericoMeiners]

Do you have various Phase1/Phase2 settings to negotiate? If yes then ask the peer to send you which Encryption and validation algorithms they have and select only one for each in both sides.