Netscreen-VPN3000 certificate-base VPN interoperability

[e.l]

Dear All,

Does anyone success to configure certificate-base VPN between NetScreen and VPN3000 ? We got the IKE (Phase1) established but no Phase2 session. Seems like there is an issue with the cert (we are using Entrust to generate cerficates). Would be very appreciate for any help

Best Regards,

[jfrahim · Accepted solution]

Hi there,

Cert checking/validation is a part of IKE phase 1. If you are passing phase1, then cert should not be an issue

You should enable IKE, IKEDBG,IPSEC

Jazib

[e.l]

Thanks, we are able to pinpoint the problem. It was something wrong with the cert. After we create a new cert and import it to both devices, they can negotiate the VPN without problem. The configuration is very simple, just a plain certificate-base VPN LAN2LAN.

Best Regards,

Engelhard

[nmalho]

Hi, I'm also having similar problems. Can you please send me the details of how you did the config.

Thanks,

Naveen