NS25 VPN to esoft instagate

[sickss]

I am configuring a NS25 for a ipsec vpn to a esoft instagate. Even if I match the SA types, I can only get the phase 1 to connect. I have never been able to get the phase 2 to go....any ideas, or any way to get further information from the log?

Thanks
Dennis

 

[Njetscreamer]

Dennis,

just found this one.

You can set the NetScreen to accept any phase2 proposal and then check to see what is being sent.

Further to this it may be failing on proxy id.

Hence you can do the following

NS>set ike accept-all-proposal
and or for proxy id mismatching
NS>unset ike policy-checking

Kind regards

NjetScreamer