Hi there to you all,
I face a rather annoying situation.
Our client has bought several SMB Appliances for protection and safe routing through VPN Site to Site communication.
We implemented a Star network topology with those appliances.
The star is on our private cloud (it is on a vm) and the satellites are centrally managed through Smart-1 Cloud.
Well, everything was good till yesterday when the VPN tunnel could not be established, the negotiation fails on Main Mode packet 5-6 with "INVALID-COOKIE".
Also, follow sk126092, it did not work for us.
The appliances were a cluster of two 1600 SMBs.
The weird thing is that inside the Smart-1 cloud says that it has "issues": "IPSec VPN blade is about to expire Jun 26, 2023 (Evaluation)" when on the appliance itself everything seems ok: "IPSec, expiration Never, Service CPSB-VPN"
I suspect that this is a glitch on Smart-1 Cloud because when I check "Licenses" in the tab below for each member of the cluster, it says that "127.0.0.1 Never 00-1C-... CPAP-AP1600 CPSG-C-12-U CPSB-FW CPSB-VPN CPSB-IA CPSB-SSLVPN-500 CPSB-ADNC CPSB-ADNC-M..."
Any ideas?
Update: we are in the third "phase" of ecalation but with no result so far.
It seems that licensing "problems" is just "cosmetics" and nothing has to do with the real problem that causes the IKE rejection.
We have already renew our certificates to no avail,
we created brand new certificates and installed them also to no avail.
Please, we need your ideas!!!
Help!
