Hello and welcome to troubleshooting scenario number three.
So now let's bring the configuration for phase number two in the knee in the Isaac camp negotiation.
So let's say edit and we will go to advanced settings and for phase two.
Let's say that again we want to have something strong so a yes advanced encryption with Shar and just
click apply and close
let's say here.
So diagnose debug application like minus 1 And now let's go and say connect and let's wait for the logs
to to appear and see how they look.
Both still connecting
logs generated.
Now let's say diagnose B bug disable
VPN connection fail.
Please check your configuration and so on.
Good let's now go through ladybugs.
So we started their we'll do it again.
Mm hmm mm hmm.
Now take everything here in a notepad so that I'm sure nothing will change.
No logs will just mess up our our investigation.
Good.
So let's go through the logs.
So I want aggressive.
It's coming.
The uh the package is coming from this IP UDP.
Five hundred.
Coming to us.
Negotiation result.
Let's say good.
So essay proposal children match the gateway remote access VPN for.
Which means that Phase 1.
It's good.
Now in order for everything to work we have to have authentication.
Okay.
And also Phase Two.
So let's continue with investigation.
Here is the authentication so appreciate key authentication succeeded and authentication is OK.
So at this point we know that Phase 1 and notification is fine.
But we should see some problems with Phase 2.
So let's search for everything that relates to Phase 2 negotiation
and nothing here.
Here OK.
Pure proposal is this is the pier.
This is our IP address on the remote the remote worker matched face to we see some some parameters here.
As for as for the Phase 2 proposal.
So this is what's coming.
And this is this is our proposals available and this is what's coming.
So incoming proposal and we see here ESB A is CBC so which means this is a 256 and Sha 5 1 2 which we
have changed.
Right.
So in the for the plan.
And here it is.
So negotiation failure.
And it says that negotiate IP set as a error.
No it's a proposal chosen.
So I believe as compared to other other vendors here available on on the security market on the next
generation firewalls I would say that the debug is available here on the fourth net appliances on the
front virals are pretty good pretty self-explanatory.
Which is not the case for fortunate as well when we're talking about side to side VPN.
It's a different story and you can see you can see exactly how they are.
If you check my other course dedicated to site to site VPN.
But anyway regarding remote access VPN what we are studying now we can see that the message is self-explanatory
and I'm glad to see that.
So negotiation failure negotiate IP sic essay Security Association error and no essay proposal choosing.
Meaning that what I am offering to you me the 40 client the remote worker what I am offering to you
as a proposal for phase two is not matching what you have available and that's the reason the remote
access VPN is not being formed.
Let's just take a look at the rest and try to see if any other information.
It's it's important to receive this one notify your proposal match.
Phase 2 again.
So he's trying several times and again negotiation failure.
No it's a proposal chosen.
And guess what.
We are deleting this dynamic then having negotiation and releasing the slots to say so and that's it.
I shrank and that's it good.
So this is the this is the conclusion no established I'd say for exchange type information from this
IP to this IP.
Perfect.
So thank you for your time and see you in my upcoming courses as well.
Thanks a lot.