G
ATEWAY
C
ONTROLLER
S
ERIES
U
SER
M
ANUAL
VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED
P
AGE
94
OF
135
VPN IPSec Troubleshooting
The focus of the VPN IPSec standard is to ensure security, not compatibility or ease
of use. The protocol is unforgiving of configuration errors. The VPN connection will
generally be refused if something does not match. In trying to get two gateways to
connect triple check all of the settings including
VPN ID
,
Protocol
, and
Key
Timeouts
. All Phase 1 and Phase 2 settings must match. Check the VPN Log to see
if there are any obvious errors. If your first choice of Encryption and Authentication
will not connect please try all of the other options, and use the
Additional Proposals
option.
As a last resort, try manual keys. This does not make the connection much less
secure in itself, but you have to protect the keys and change them like any other pre-
shared key. However, you may need to determine the actual HEX key sent by your
VPN Gateway manufacturer.