Skip to main content
edomgauvreau
New Member
August 20, 2019
Solved

Site-to-Site VPN not working

  • August 20, 2019
  • 2 replies
  • 2909 views

Hi

one site has a web facing wan ip address (site A) and the other site is behind a router (Site B)

I've used the wizard to create a site-to-site VPN between both sites.

Site A tunnel has a "dialup" template, Site B has a "Site to Site" template

 

After creating both tunnels, here are the errors in "VPN Events" log:

The logs on Site A shows " peer SA proposal not match local policy"

The logs on Site B shows success

 

Any help would be appreciated.

 

Thanks

    Best answer by zaphod

    Hi,

     

    the templates may differ in SA in Phase2. 

    i never use the wizards cause they create groups for all and anything.. 

     

    tipp from me.. dont use the wizards and create your own VPNs (custom)... you learn something then :)

     

    greets

     

    zaphod

     

    2 replies

    zaphod
    zaphodAnswer
    New Member
    August 20, 2019

    Hi,

     

    the templates may differ in SA in Phase2. 

    i never use the wizards cause they create groups for all and anything.. 

     

    tipp from me.. dont use the wizards and create your own VPNs (custom)... you learn something then :)

     

    greets

     

    zaphod

     

    edomgauvreau
    New Member
    August 20, 2019

    Yep, found it!

    When I switched to Custom, I saw the option of Auto-Negotiate in the Advanced options of Phase 2 Selectors.

    Enabled it brought the VPN up

     

    Thanks zaphod!

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!