Phase 2 Selectors

9 replies
28340 views

Hi!

Should the Local Address be an internal address like 192.168.14.0 at our site and the remote address an internal address for the remote site lika 192.168.15.0 or should it be external addresses?

Thank you.

rwpattersonAnswer

New Member

The selectors (as the name implies) 'select' the networks that are allowed to pass through the tunnels on the INSIDE of the VPN, so yes the private addresses are the ones to be used here. Phase 1 determines the peer connections.

rwpattersonAnswer

New Member

The selectors (as the name implies) 'select' the networks that are allowed to pass through the tunnels on the INSIDE of the VPN, so yes the private addresses are the ones to be used here. Phase 1 determines the peer connections.

Carlanderska_SAuthor

New Member

Thank you! The firewall tells me that the IPsec tunnel is down. I can't bring it up. The log says that Phase 1 is successfully though.

emnoc

New Member

What are you connecting with ( cisco palo fortigate juniper ). You need to validate ike/ipsec settings and monior for IKE/IPSEC SAs

Ken

JD168

New Member

Hi, please set as local address the local internal lan (192.168.14.0) and as remote address the remote lan (192.168.15.0). Kind regards.

Carlanderska_SAuthor

New Member

Thank you!

GabLVillarreal

New Member

I have this same Issue, everything seems to be correctly configured, outgoing and incomming policies, static route, ike, encryption and DS groups on both FG devices. But when I try to bring up phase 2 selectors, it pretty much does nothing but keep successfully negotiating phase 1.

Sign up

Login with SSO

Login to the community

Login with SSO