The VPN tunnel wasn't coming up for me and in the log there was the message:
Received notify: INVALID_ID_INFO
This was an interesting message and it really had nothing to do with the identification of the tunnel or addresses or, SA name or description, or even with the remote firewall's names or descriptions. It was caused by having both of the Sonicwalls in Aggressive mode for Phase 1 of the tunnel establishment. Switching both to Main mode solved the problem. The setting can be found in the VPN policy Proposals Tab.
Once this change was done, the VPN came right up and the two sites were communicating with each other. This is a setting that can catch some one off-guard and the message that inserted into the log can be deceiving. It can make one think the the name of something is incorrect. Sonicwall's support can have you running in circles too.
As a reminder:
0 comments:
Post a Comment