Re: IP Sec VPN with Checkpoint and Proxy ID

Hi Jonashauge

 Thanks for you help , I found error on juniper 

[1297]: IKE negotiation failed with error: SA unusable. IKE Version: 1, VPN: XXX Gateway: XXXX, Local: xx.xx.xx.xx/500, Remote: xxx.xxx.xxx.xxx/500, Local IKE-ID: Not-Available, Remote IKE-ID: Not-Available, VR-ID: 4

RT_IPSEC: RT_IPSEC_BAD_SPI: IPSec tunnel on int reth1.2101 with tunnel ID 0x2000d received a packet with a bad SPI. xxx.xx.xx.xx->xx.xx.xx.xx/216, ESP, SPI 0xe604bddb, SEQ 0x1bfbb.

 And my customer have a question about why he need to configuration Proxy-ID  cause now ipsec vpn can operation

but what is a rootcause of tunnel down ?

  Best Regard 

Ake V