hclcool 发表于 2014-9-22 14:20:44

求助！ssg5与SRX22０h2创建VPN不成功

请大侠们帮忙。
　　有两个设备分别是netscreen－ssg5 与SRX－220h2　，在它们上面创建了一个site－to－site VPN,不成功。
发现在ssg5的日志是下面这样的： （而SRX－220h2与别一台ssg5设备又能正常创建ＶＰＮ）


    22/9/201413:18:20infoRejected anIKE packet on ethernet0/0 from 192.168.20.254:500 to 192.168.30.254:500 withcookies 0b8356f11d9779d9 and 1acc8292c7910d89 because There was a preexistingsession from the same peer.
22/9/201413:18:20infoIKE192.168.20.254 Phase 2 msg ID b9ce3279: Responded to the peer's first message.
22/9/201413:18:20infoIKE192.168.20.254: Received initial contact notification and removed Phase 1 SAs.
22/9/201413:18:20infoIKE5192.168.20.254 Phase 1: Completed Main mode negotiations with a 28800-secondlifetime.
22/9/201413:18:20infoIKE192.168.20.254: Received initial contact notification and removed Phase 2 SAs.
22/9/201413:18:20infoIKE192.168.20.254: Received a notification message for DOI 1 24578INITIAL-CONTACT.
22/9/201413:18:20infoIKE192.168.20.254: phase 1:The symmetric crypto key has been generatedsuccessfully.
22/9/201413:18:20infoIKE192.168.20.254 Phase 1: Responder starts MAIN mode negotiations.
22/9/201413:18:10infoIKE192.68.20.254 Phase 2 msg ID ec9c9d9a: Responded to the peer's first message.
22/9/201413:18:10infoIKE192.168.20.254 Received initial contact notification and removed Phase 1 SAs.
22/9/201413:18:10infoIKE192.168.20.254 Phase 1: Completed Main mode negotiations with a 28800-secondlifetime.
22/9/201413:18:10infoIKE192.168.20.254: Received initial contact notification and removed Phase 2 SAs.
22/9/201413:18:10infoIKE192.168.20.254: Received a notification message for DOI 1 24578INITIAL-CONTACT.
22/9/201413:18:10infoIKE192.168.20.254 phase 1:The symmetric crypto key has been generatedsuccessfully.
22/9/201413:18:10infoIKE192.168.20.254 Phase 1: Responder starts MAIN mode negotiations.
22/9/201413:18:00infoIKE192.168.20.254 Phase 2 msg ID e20ae55d: Responded to the peer's first message.
22/9/201413:18:00infoIKE192.168.20.254: Received initial contact notification and removed Phase 1 SAs.
22/9/201413:18:00infoIKE192.168.20.254 Phase 1: Completed Main mode negotiations with a 28800-secondlifetime.
22/9/201413:18:00infoIKE192.168.20.254: Received initial contact notification and removed Phase 2 SAs.
22/9/201413:18:00infoIKE192.168.20.254: Received a notification message for DOI 1 24578INITIAL-CONTACT.
22/9/201413:18:00infoIKE192.168.20.254 phase 1:The symmetric crypto key has been generatedsuccessfully.
22/9/201413:18:00infoIKE192.168.20.254 Phase 1: Responder starts MAIN mode negotiations.

hclcool 发表于 2014-9-25 10:48:12

本帖最后由 hclcool 于 2014-9-25 10:52 编辑

{:6_268:}这几天都没有人抢沙发？
没有服友碰到这种情况？

﹎注销ㄨ恛憶 发表于 2014-10-22 14:25:06

谢谢分享啊！

jcq18946450445 发表于 2017-1-17 19:21:32

{:6_267:}{:6_267:}{:6_267:}
页: [1]
查看完整版本: 求助！ssg5与SRX22０h2创建VPN不成功