cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Sanjay_S
Nickel

VPN Stability Issue

Hi All,

We have a VPN tunnel between R80.10 to R65 Checkpoint devices. The VPN is not stable, we ran the debug during the issue and found that the R65 device is Deleting the Negotiation for Phase 1 at first few times and then it accepts and create the SA.

NegotiationTable::NegotiationUpdated: Updating indices for: 
NegotiationTable::DeleteNegotiation: Invoked for:

>The debug logs from R80.10 says the below:

NegotiationTable::MatchPeerMethodsIDs: No match found.
NegotiationTable::MatchPeerP1Neg: No match found.
 
However, after few negotiation it will come up automatically. Is there any know limitations in R65?
 
Thanks in Advance.
0 Kudos
4 Replies
Employee++
Employee++

Re: VPN Stability Issue

R65 has been end of support for a number of years. Is this a gateway managed by a 3rd party?
0 Kudos
Sanjay_S
Nickel

Re: VPN Stability Issue

Hi Chris,

Gateway is managed by the 3rd party.
0 Kudos
Highlighted
Admin
Admin

Re: VPN Stability Issue

R80.10 supports more encryption methods than R65.
Assuming the VPN community settings match on both ends it should still work.
That said R65 has been End of Support for years now.
0 Kudos

Re: VPN Stability Issue

Do you have various Phase1/Phase2 settings to negotiate? If yes then ask the peer to send you which Encryption and validation algorithms they have and select only one for each in both sides.
____________
https://www.linkedin.com/in/federicomeiners/
0 Kudos