2021天融信 NG 系列防火墻配置手冊(cè)

TheGreenBowIPSecVPNIPSecVPNTheGreenBowSistechSA-?2001-VPN ? 手冊(cè)用 VPN網(wǎng) 天融信防火 VPN客戶(hù)端第二階段（IPSec階段）設(shè) 啟用IPSecVPN隧 IPSecVPN問(wèn)題分 ?畸形載荷?錯(cuò)誤(階段1?立錯(cuò)誤 ?無(wú)效COOKIE?錯(cuò) ?nokeystate?錯(cuò) ??收到?遠(yuǎn)程ID與所期不符?錯(cuò) ?noproposalchosen?錯(cuò) ?無(wú)效?ID信息?錯(cuò) “我點(diǎn)擊‘打開(kāi)隧道’,但是什么都沒(méi)出現(xiàn) “VPN隧道?激活了，但是我Ping不通 聯(lián)系我 VPN VPNVPNIPSecVPNNGVPN連??過(guò)程。VPNDSL或者通過(guò)局域網(wǎng)上網(wǎng)。文中所有IP地址僅為示例使用。IPSecTOPSECNGFW4000系列防火墻?所有相關(guān)信息。VPNVPNVPN這章?紹VPN客TOPSECNGFW4000系列防?VPN連?請(qǐng)通過(guò)以下鏈?下載TheGreenBow 客戶(hù)端軟件最新版本：/zh/vpn_down.html遠(yuǎn)端遠(yuǎn)端VPN可是一個(gè)IP1VPNVPNLAN2VPN啟用IPSecVPN當(dāng)天融信防?IPSecVPN客VPN隧道。首先，請(qǐng)?墻允許IPSec數(shù)據(jù)流通1、點(diǎn)擊“保存和提交”保存并應(yīng)用已經(jīng)在VPN客2、點(diǎn)擊“打開(kāi)隧道”自IPSecVPN3、點(diǎn)擊“連?”查看已經(jīng)啟動(dòng)?VPN4、點(diǎn)擊“控制臺(tái)”。若您想IPSecVPN日志，IPSecVPNVPN配置一條IPSecVPNVPN?立。VPN?立過(guò)程中找到產(chǎn)生問(wèn)題?原因所在。Wsk是可以分析數(shù)據(jù)包和包流程?免費(fèi)軟件。它顯示在網(wǎng)卡上收到?IP和TP數(shù)據(jù)包。tt.rsrk.g。它可以用在兩個(gè)設(shè)備之間搜集協(xié)議交換流程。VPN1114920Default(SACNXVPN1-P1)SENDphase1MainMode[SA][VID]114920Default(SACNXVPN1-P1)RECVphase1MainMode[NOTIFY]114920Defaultexchange_run:exchange_validatefailed114920Defaultdroppedmessagefrom14port500duetonotificationtype114920DefaultSENDInformational[NOTIFY]withPAYLOAD_MALFORMED?錯(cuò)誤，有可能是您輸入了錯(cuò)誤?第一階段[SA]VPN隧COOKIE115933Defaultmessage_recv:invalidcookie(s)5918ca0c2634288f115933Defaultdroppedmessagefrom14port500duetonotificationtypeINVALID_COOKIE115933DefaultSENDInformational[NOTIFY]withINVALID_COOKIEerrorCOOKIE?VPN端點(diǎn)（客戶(hù)端或點(diǎn)）SA而VPN連?。nokeystate115315Default(SACNXVPN1-P1)SENDphase1MainMode[SA][VID]115317Default(SACNXVPN1-P1)RECVphase1MainMode[SA][VID]115317Default(SACNXVPN1-P1)SENDphase1MainMode115319Default(SACNXVPN1-P1)RECVphase1MainMode115319Default(SACNXVPN1-P1)SENDphase1MainMode115319Defaultipsec_get_keystate:nokeystateinISAKMPSA檢查“預(yù)共享密鑰”是否正確或者檢查“IDVPN端點(diǎn)?日志?收到?遠(yuǎn)程ID120348Default(SACNXVPN1-P1)SENDphase1MainMode[SA][VID]120349Default(SACNXVPN1-P1)RECVphase1MainMode[SA][VID]120349Default(SACNXVPN1-P1)SENDphase1MainMode120351Default(SACNXVPN1-P1)RECVphase1MainMode120351Default(SACNXVPN1-P1)SENDphase1MainMode120351Default(SACNXVPN1-P1)RECVphase1MainMode120351Defaultike_phase_1_recv_ID:receivedremoteIDotherthanexpected兩端?“遠(yuǎn)程IDVPNnoproposalchosen115911Default(SACNXVPN1-P1)SENDphase1MainMode[SA][VID]115913Default(SACNXVPN1-P1)RECVphase1MainMode[SA][VID]115913Default(SACNXVPN1-P1)SENDphase1MainMode115915Default(SACNXVPN1-P1)RECVphase1MainMode115915Default(SACNXVPN1-P1)SENDphase1MainMode115915Default(SACNXVPN1-P1)RECVphase1MainMode115915Defaultphase1done:initiatoridc364cd70:12,responderidc364cd72:src:12dst:115915Default(SACNXVPN1-CNXVPN1-P2)SENDphase2QuickMode115915DefaultRECVInformational[HASH][NOTIFY]withNO_PROPOSAL_CHOSENerror115915DefaultRECVInformational[HASH][DEL]115915DefaultCNXVPN1-P1noproposalchosen2加密方式和密碼是否相同。1?認(rèn)證方式是否相同。115911Default(SACNXVPN1-P1)SENDphase1MainMode115911DefaultRECVInformational[NOTIFY]withNO_PROPOSAL_CHOSENID信息122623Default(SACNXVPN1-P1)SENDphase1MainMode[SA][VID]122625Default(SACNXVPN1-P1)RECVphase1MainMode[SA][VID]122625Default(SACNXVPN1-P1)SENDphase1MainMode122626Default(SACNXVPN1-P1)RECVphase1MainMode122626Default(SACNXVPN1-P1)SENDphase1MainMode122626Default(SACNXVPN1-P1)RECVphase1MainMode122626Defaultphase1done:initiatoridc364cd70:12,responderidc364cd72:src:12dst:122626Default(SACNXVPN1-CNXVPN1-P2)SENDphase2QuickMode122626DefaultRECVInformational[HASH][NOTIFY]withINVALID_ID_INFORMATIONerror122626DefaultRECVInformational[HASH][DEL]122626DefaultCNXVPN1-P1ID?2ID(本地IP地址和網(wǎng)絡(luò)地址)是否正確并且和ID（“子網(wǎng)掩碼”“地址范圍”）?！?VPN兩端?日志，IKEI