netscreen SSG520M 與SSG5 配置點對點基於路由策略×××報錯

時間 2020-01-19

標籤 netscreen ssg520m ssg ssg5 配置點對點基於路由策略報錯欄目系統網絡简体版

原文原文鏈接

因爲公司Netscreen SSG140升級爲SSG520,根據如下文章cookie

http://viong.blog.51cto.com/blog/844766/247995ide

配置SSG140與SSG520對等端×××無報錯,配置SSG5與SSG520對等端×××報如下錯誤:spa

2012-11-01 21:14:47 info Rejected an IKE packet on ethernet0/3 from 60.12.*.*500 to 111.161. .*.* :500 with cookies 655c4e8fc4c582d6 and bf9899ec79c8db4a because The peer sent a proxy ID that did not match the one in the SA config.blog

2012-11-01 21:14:47 info IKE 60.12. .*.* Phase 2: No policy exists for the proxy ID received: local ID (0.0.0.0/255.255.255.255, 0, 0) remote ID (192.168.31.0/255.255.255.0, 0, 0).rem

2012-11-01 21:14:47 info IKE 60.12. .*.* Phase 2 msg ID 9f57a3ae: Responded to the peer's first message.get

2012-11-01 21:14:43 info IKE 60.12. .*.* Phase 2 msg ID 9f57a3ae: Negotiations have failed.it

解決方式:io

在SSG520端添加如下信息,SSG端無需改變:cookies