Skip to main content
StephaneYahoo
StephaneYahoo
New Member
November 24, 2019
Question

VPN issue "negotiation timeout, deleting - connection expiring due to phase1 down"

  • November 24, 2019
  • 2 replies
  • 8595 views

Hello,

 

I have many VPN tunnels configured with the same settings

Some of them are down and some are up

The link monitor status is alive

The diagnose debug application ike -1 command shows a negotiation timeout in the phase 1

Does someone have an idea about the root cause?

Thanks for your help

 

S.

    2 replies

    StephaneYahoo
    StephaneYahooAuthor
    New Member
    December 15, 2019

    Issue due to configuration mismatch between peers...

    Stemjay
    Stemjay
    New Member
    September 7, 2023

    hi Stephane, iam experiencing a similar challenge are you able to share the parameters that were mimatched or steps taken to resolve

    dbu
    Staff
    dbu
    Staff
    September 7, 2023

    Hello,

     

    Negotiation timeout can happen for many reasons. 

    Did it ever work for those clients ?  Or is the issue intermittent? 

    If Not,Are those peers same type devices ? What vendor/client?


    I believe  best next action is to take a packet capture. Definitely a packet capture can show you more  information on what packets are sent and received.

    You can run also the debug " diagnose debug application ike -1"

     

    Regards!

    Terms & ConditionsAccessibility statement