debug vpn ikev2 on gaia embedded appliances - Invalid key exchange payload

[andy_currigan]

We need to debug a vpn that do not come up, on the smartlog we get an "Invalid key exchange payload message" and on "vpn tu" we see different SA for the same peer IP.

we did not change nothing on our side and same on the 3rd party peer.

how can we investigate an ikev2 vpn on an checkpoint 1600 appliance with gaia embedded?

is there an ikeview tool like for ikev1 vpn?

thanks.

[PhoneBoy]

Debugging VPN issues on SMB appliances: https://support.checkpoint.com/results/sk/sk62482
The format should be the same as for regular gateways, thus IKEview should be usable.