PepLink 380 and Juniper SRX site-to-site VPN problem


#1

Hi all,

We try to use PepLink 380 (firmware : 5.4.9s21 build 2645) and Juniper SRX-240 ( JUNOS ) to create site-to-site VPN tunnel.
But we occur problem as below pic.

When tunnel rebuild, we will get one ping loss during long ping test. (Highly frequency)

Does anyone ever meet this situation ?

Phase_1 : pre-g2-2des-sha1
Phase_2 : nopfs-esp-3des-sha1

Log information:
[TABLE=“class: stat_table content_table, width: 634”]
[TR=“class: zb2, bgcolor: #E6E6E6”]
Mar 18 16:14:18
IPsec: 1. HQ to LA - CHT/1x2 - Disconnected
[/TR]
[TR=“class: zb1”]
Mar 18 16:14:18
IPsec: 1. HQ to LA - CHT/1x1 - Disconnected
[/TR]
[TR=“class: zb2, bgcolor: #E6E6E6”]
Mar 18 16:13:38
IPsec: 1. HQ to LA - CHT/1x1 - Connected
[/TR]
[TR=“class: zb1”]
Mar 18 16:13:38
IPsec: 1. HQ to LA - CHT/1x2 - Connected
[/TR]
[TR=“class: zb2, bgcolor: #E6E6E6”]
Mar 18 16:13:37
IPsec: 1. HQ to LA - CHT/1x1 - Initiating Main Mode connection…
[/TR]
[TR=“class: zb1”]
Mar 18 16:13:37
IPsec: 1. HQ to LA - CHT/1x2 - Disconnected
[/TR]
[TR=“class: zb2, bgcolor: #E6E6E6”]
Mar 18 16:13:37
IPsec: 1. HQ to LA - CHT/1x1 - Disconnected
[/TR]
[TR=“class: zb1”]
Mar 18 16:12:57
IPsec: 1. HQ to LA - CHT/1x1 - Connected
[/TR]
[TR=“class: zb2, bgcolor: #E6E6E6”]
Mar 18 16:12:57
IPsec: 1. HQ to LA - CHT/1x2 - Connected
[/TR]
[TR=“class: zb1”]
Mar 18 16:12:56
IPsec: 1. HQ to LA - CHT/1x1 - Initiating Main Mode connection…
[/TR]
[TR=“class: zb2, bgcolor: #E6E6E6”]
Mar 18 16:12:56
IPsec: 1. HQ to LA - CHT/1x2 - Disconnected
[/TR]
[TR=“class: zb1”]
Mar 18 16:12:56
IPsec: 1. HQ to LA - CHT/1x1 - Disconnected
[/TR]
[TR=“class: zb2, bgcolor: #E6E6E6”]
Mar 18 16:12:16
IPsec: 1. HQ to LA - CHT/1x1 - Connected
[/TR]
[TR=“class: zb1”]
Mar 18 16:12:15
IPsec: 1. HQ to LA - CHT/1x2 - Connected
[/TR]
[TR=“class: zb2, bgcolor: #E6E6E6”]
Mar 18 16:12:15
IPsec: 1. HQ to LA - CHT/1x1 - Initiating Main Mode connection…
[/TR]
[/TABLE]

many thanks,
Tony.


#2

Hi Tony,

Can you confirm Phase 1 (IKE) Proposal? We don’t support 2DES. Plase try 3DES & SHA1 or AES-256 & SHA1.