Skip to main content
MH1
New Member
November 6, 2008
Question

IPSEC VPN Error

  • November 6, 2008
  • 3 replies
  • 5306 views
I' m getting the following every few seconds. 2008-11-06 09:24:21 error negotiate failure Responder: parsed XXX.XXX.XXX.XXX quick mode message #1 (ERROR) 2008-11-06 09:24:17 error negotiate failure Responder: parsed XXX.XXX.XXX.XXX quick mode message #1 (ERROR) 2008-11-06 09:24:00 error negotiate failure Responder: parsed XXX.XXX.XXX.XXX quick mode message #1 (ERROR) Eventually the tunnel drops and my users are disconnected. Phase 1 edit " XXXXXX" set interface " wan1" set nattraversal enable set dhgrp 1 set proposal 3des-md5 set remote-gw XXX.XXX.XXX.XXX set psksecret ENC XXXXXXXXXXXXXXXXXXXX next Phase 2 edit " XXXXXXX" set keepalive enable set phase1name " XXXXXXX" set proposal 3des-md5 set dst-subnet 172.16.50.0 255.255.255.0 set keylifeseconds 28800 set src-subnet 192.168.12.0 255.255.255.0 next Policy edit 20 set srcintf " internal1" set dstintf " wan1" set srcaddr " LocalLan" set dstaddr " SonicalWall" set action ipsec set schedule " always" set service " ANY" set logtraffic enable set inbound enable set outbound enable set vpntunnel " XXXXXXX" next Thank you

    3 replies

    abelio
    SuperUser
    SuperUser
    November 6, 2008
    Hi, You' re using DH=1 for phase1 and DH=5 for phase2 Does your sonic wall' s matches those settings?
    MH1
    MH1Author
    New Member
    November 7, 2008
    Thank you. I believe the DH was the issue. The sonicwall had 1 and 2 for phase 1 select. I' m also noticing this error that occurs periodically. IPsec DPD detected a failure on the tunnel to XXX.XXX.XXX.XXX:500 Any help would be appreciated.
    rwpatterson
    New Member
    November 7, 2008
    Uncheck the dead peer detection (DPD) checkbox on the FGT, then those ' errors' will disappear. They' re actually notifications.
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!