Juniper / PulseSecure

Wo konfiguriert man das Gegenstück zu Proxy-IDs bei Juniper/Netscreen? LANCOM zu NETSCREEN Site2Site policybased VPN Bei Lancom wird weder dieser Begriff genutzt noch gibt es eine Stelle, wo das lokale und das remote Netz an einer Stelle angegeben werden. Das Remote Netz allein wird hier konfiguriert:   Die lokalen Netze werden aus der FW Regel genommen, die den Zugriff dann erlaubt.D.h. man braucht eine FW Regel, damit die Proxy-IDs laufen !!

The newly introduced IPsec system logs are: IKE Phase-1: Responder starts Main mode negotiations—The remote peer at the specified IP address has initiated Phase 1 negotiations in either Main or Aggressive mode, and the local security device (the Responder) has begun its response. No recommended action. IKE Phase-1: (Initiator) symmetric crypto key has been generated successfully—The P1 or manual key used for encryption has been generated successfully. No recommended action. IKE Phase-1: Negotiation completed—The local security device has sent the initial message for IKE Phase 2 negotiations to the specified peer. No recommended action. IKE Phase-1 Failure: Main mode – no proposal chosen—There were no acceptable Phase 1 proposals. The specified negotiations to the identified IKE failed. Examine the local …

weiterlesen ….