Disclaimer

The content of this material are challenges faced onsite and how I personally resolved them. Please be noted that solutions posted here

1> should not be considered as ultimate. The material may be considered for reference only.

2> should not be considered as guarantee that solutions may work. Contact Cyberoam support before making any changes.

3> blog does NOT belong to the Cyberoam. It's a blog...a personal blog.

Changes done after referring this site may seriously damage the network. So...

........DO CHANGES AT YOUR OWN RISK

(please contact cyberoamsupport before implementing any changes)

Monday, 12 December 2011

IPSec Error

Error log:

Dec 09 12:37:50 "Mind_set_Tunnell-3" #5813: cannot respond to IPsec SA request because no connection is known for 10.64.21.160/28===1xx.110.1xx.98...91.21.xx.xxx===10.80.0.0/13


Solution:


This log describes the SA. The CR is not able to match this SA to any of its already existing SA. Check carefully the subnets at both ends. Everytime there is this error, customer has always done error in the subnet mask or the lan Ip address. So check carefully.

No comments:

Post a Comment