NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Gateway VPN SRX5308 to Cisco RV320
We are attempting to setup a VPN gateway connection between an SRX5308 (latest firmware) with a Cisco RV320 (also latest firmware) and cannot get them to connect. We believe we have the configuration...
We got it working. Seems the Cisco does not accept the same special characters as the NetGear, and that was the SA Protocol error. It is up and running now. Thanks for your help!
Post screens of both sides configs, if you can.
According to the logs you posted, phase 1 is not completing. Generally this is an IKE settings mismatch.
I cannot post pictures of the config here, but here are the settings from each:
SRX5308
Encryption Algorythm: 3DES
Authentication Algorythm: MD5
Pre-Shared Key
DH Group 2 1024 bit
SA Lifetime 28800 sec
Dead Peer - no
Direction - Both
Exchange Mode - Main
Cisco RV320
Phase 1 DH Group 1 1024 bit
Phase 1 Encryption: 3DES
Phase 1 Authentication: MD5
SA Lifetime 28800
Perfect Forward Secrecy - Enabled by default, but we tested with and without this setting
Advanced - Exchange mode - Main
Phase 2 settings - same as above
Thanks for looking at this. I'm banging my head trying to see something that is different....
Latest log file:
[SRX5308] [IKE] ERROR: Phase 2 negotiation failed due to time up waiting for phase1.
Wed Apr 19 14:49:04 2017 (GMT +0000): [SRX5308] [IKE] ERROR: Invalid SA protocol type: 0
Wed Apr 19 14:48:49 2017 (GMT +0000): [SRX5308] [IKE] INFO: Received Malformed packet of payload length 22172 and total length 32.
Wed Apr 19 14:48:32 2017 (GMT +0000): [SRX5308] [IKE] INFO: Configuration found for 173.9.167.xxx.
Wed Apr 19 14:48:32 2017 (GMT +0000): [SRX5308] [IKE] INFO: Configuration found for 173.9.167.xxx.
Wed Apr 19 14:48:32 2017 (GMT +0000): [SRX5308] [IKE] INFO: accept a request to establish IKE-SA: 173.9.167.xxxWe got it working. Seems the Cisco does not accept the same special characters as the NetGear, and that was the SA Protocol error. It is up and running now. Thanks for your help!
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
