Looking at a portion of the JSC client logs...
...
8/11/2025 12:45:29 PM - IpsDial: connection time interface
choice,LocIpa=172.31.10.16,AdapterIndex=202,OsIndex=14
8/11/2025 12:45:29 PM - Ike: Opening connection in PATHFINDER mode :
my-jsc-vpn-pro
8/11/2025 12:45:29 PM - Ike: Outgoing connect request AGGRESSIVE mode -
gateway=123.123.123.225 : my-jsc-vpn-pro
8/11/2025 12:45:29 PM - Ike: ConRef=26, XMIT_MSG1_AGGRESSIVE,
name=my-jsc-vpn-pro, vpngw=123.123.123.225:500
8/11/2025 12:45:29 PM -
ike_phase1:send_id:ID_USER_FQDN:pid=0,port=0,[email protected]
8/11/2025 12:45:29 PM - Ike: ConRef=26, Send NAT-D vendor ID,remprt=500
Here’s where I see a difference… working here…
8/11/2025 12:45:29 PM - Ike: ConRef=26, RECV_MSG2_AGGRESSIVE,
adapterindex=202,name=my-jsc-vpn-pro, remote
ip:port=123.123.123.225:500,local ip:port=172.31.10.16:10952
8/11/2025 12:45:29 PM - Ike: IKE phase I: Setting LifeTime to 28800 seconds
8/11/2025 12:45:29 PM - Ike: Turning on XAUTH mode - my-jsc-vpn-pro
8/11/2025 12:45:29 PM - Ike: IkeSa1 negotiated with the following
properties -
8/11/2025 12:45:29 PM -
Authentication=XAUTH_INIT_PSK,Encryption=AES,Hash=SHA_256,DHGroup=19,KeyLen=256
8/11/2025 12:45:29 PM - Ike: my-jsc-vpn-pro ->Support for NAT-T version - 9
8/11/2025 12:45:29 PM - Ike: Turning on NATD mode - my-jsc-vpn-pro - 1
...
================================================================================
...
8/11/2025 12:24:14 PM - IpsDial: connection time interface
choice,LocIpa=172.31.10.16,AdapterIndex=202,OsIndex=14
8/11/2025 12:24:14 PM - Ike: Opening connection in PATHFINDER mode :
my-jsc-vpn-pro
8/11/2025 12:24:14 PM - Ike: Outgoing connect request AGGRESSIVE mode -
gateway=123.123.123.225 : my-jsc-vpn-pro
8/11/2025 12:24:14 PM - Ike: ConRef=24, XMIT_MSG1_AGGRESSIVE,
name=my-jsc-vpn-pro, vpngw=123.123.123.225:500
8/11/2025 12:24:14 PM -
ike_phase1:send_id:ID_USER_FQDN:pid=0,port=0,[email protected]
8/11/2025 12:24:14 PM - Ike: ConRef=24, Send NAT-D vendor ID,remprt=500
Here’s where I see a difference… not working here…
8/11/2025 12:24:14 PM - Ike: ConRef=24, NOTIFY : my-jsc-vpn-pro :
RECEIVED : NO_PROPOSAL_CHOSEN : 14
8/11/2025 12:24:17 PM - Ike: ConRef=24, retry timeout, resend
to=123.123.123.225
8/11/2025 12:24:17 PM - Isakmp: re-sending packet
to=123.123.123.225:500,size=520
8/11/2025 12:24:21 PM - Ike: Switching to TCP ENCAPSULATION in
PATHFINDER_1 : my-jsc-vpn-pro
...
-Aaron
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp
