2021天融信 NG 系列防火墻配置手冊

TheGreenBowIPSecVPNIPSecVPNTheGreenBowSistechSA-?2001-VPN ? 手冊用 VPN網(wǎng) 天融信防火 VPN客戶端第二階段（IPSec階段）設 啟用IPSecVPN隧 IPSecVPN問題分 ?畸形載荷?錯誤(階段1?立錯誤 ?無效COOKIE?錯 ?nokeystate?錯 ??收到?遠程ID與所期不符?錯 ?noproposalchosen?錯 ?無效?ID信息?錯 “我點擊‘打開隧道’,但是什么都沒出現(xiàn) “VPN隧道?激活了，但是我Ping不通 聯(lián)系我 VPN VPNVPNIPSecVPNNGVPN連??過程。VPNDSL或者通過局域網(wǎng)上網(wǎng)。文中所有IP地址僅為示例使用。IPSecTOPSECNGFW4000系列防火墻?所有相關信息。VPNVPNVPN這章?紹VPN客TOPSECNGFW4000系列防?VPN連?請通過以下鏈?下載TheGreenBow 客戶端軟件最新版本：/zh/vpn_down.html遠端遠端VPN可是一個IP1VPNVPNLAN2VPN啟用IPSecVPN當天融信防?IPSecVPN客VPN隧道。首先，請?墻允許IPSec數(shù)據(jù)流通1、點擊“保存和提交”保存并應用已經在VPN客2、點擊“打開隧道”自IPSecVPN3、點擊“連?”查看已經啟動?VPN4、點擊“控制臺”。若您想IPSecVPN日志，IPSecVPNVPN配置一條IPSecVPNVPN?立。VPN?立過程中找到產生問題?原因所在。Wsk是可以分析數(shù)據(jù)包和包流程?免費軟件。它顯示在網(wǎng)卡上收到?IP和TP數(shù)據(jù)包。tt.rsrk.g。它可以用在兩個設備之間搜集協(xié)議交換流程。VPN1114920Default(SACNXVPN1-P1)SENDphase1MainMode[SA][VID]114920Default(SACNXVPN1-P1)RECVphase1MainMode[NOTIFY]114920Defaultexchange_run:exchange_validatefailed114920Defaultdroppedmessagefrom14port500duetonotificationtype114920DefaultSENDInformational[NOTIFY]withPAYLOAD_MALFORMED?錯誤，有可能是您輸入了錯誤?第一階段[SA]VPN隧COOKIE115933Defaultmessage_recv:invalidcookie(s)5918ca0c2634288f115933Defaultdroppedmessagefrom14port500duetonotificationtypeINVALID_COOKIE115933DefaultSENDInformational[NOTIFY]withINVALID_COOKIEerrorCOOKIE?VPN端點（客戶端或點）SA而VPN連?。nokeystate115315Default(SACNXVPN1-P1)SENDphase1MainMode[SA][VID]115317Default(SACNXVPN1-P1)RECVphase1MainMode[SA][VID]115317Default(SACNXVPN1-P1)SENDphase1MainMode115319Default(SACNXVPN1-P1)RECVphase1MainMode115319Default(SACNXVPN1-P1)SENDphase1MainMode115319Defaultipsec_get_keystate:nokeystateinISAKMPSA檢查“預共享密鑰”是否正確或者檢查“IDVPN端點?日志?收到?遠程ID120348Default(SACNXVPN1-P1)SENDphase1MainMode[SA][VID]120349Default(SACNXVPN1-P1)RECVphase1MainMode[SA][VID]120349Default(SACNXVPN1-P1)SENDphase1MainMode120351Default(SACNXVPN1-P1)RECVphase1MainMode120351Default(SACNXVPN1-P1)SENDphase1MainMode120351Default(SACNXVPN1-P1)RECVphase1MainMode120351Defaultike_phase_1_recv_ID:receivedremoteIDotherthanexpected兩端?“遠程IDVPNnoproposalchosen115911Default(SACNXVPN1-P1)SENDphase1MainMode[SA][VID]115913Default(SACNXVPN1-P1)RECVphase1MainMode[SA][VID]115913Default(SACNXVPN1-P1)SENDphase1MainMode115915Default(SACNXVPN1-P1)RECVphase1MainMode115915Default(SACNXVPN1-P1)SENDphase1MainMode115915Default(SACNXVPN1-P1)RECVphase1MainMode115915Defaultphase1done:initiatoridc364cd70:12,responderidc364cd72:src:12dst:115915Default(SACNXVPN1-CNXVPN1-P2)SENDphase2QuickMode115915DefaultRECVInformational[HASH][NOTIFY]withNO_PROPOSAL_CHOSENerror115915DefaultRECVInformational[HASH][DEL]115915DefaultCNXVPN1-P1noproposalchosen2加密方式和密碼是否相同。1?認證方式是否相同。115911Default(SACNXVPN1-P1)SENDphase1MainMode115911DefaultRECVInformational[NOTIFY]withNO_PROPOSAL_CHOSENID信息122623Default(SACNXVPN1-P1)SENDphase1MainMode[SA][VID]122625Default(SACNXVPN1-P1)RECVphase1MainMode[SA][VID]122625Default(SACNXVPN1-P1)SENDphase1MainMode122626Default(SACNXVPN1-P1)RECVphase1MainMode122626Default(SACNXVPN1-P1)SENDphase1MainMode122626Default(SACNXVPN1-P1)RECVphase1MainMode122626Defaultphase1done:initiatoridc364cd70:12,responderidc364cd72:src:12dst:122626Default(SACNXVPN1-CNXVPN1-P2)SENDphase2QuickMode122626DefaultRECVInformational[HASH][NOTIFY]withINVALID_ID_INFORMATIONerror122626DefaultRECVInformational[HASH][DEL]122626DefaultCNXVPN1-P1ID?2ID(本地IP地址和網(wǎng)絡地址)是否正確并且和ID（“子網(wǎng)掩碼”“地址范圍”）?！?VPN兩端?日志，IKEI