Quantcast
Channel: All EdgeRouter posts
Viewing all articles
Browse latest Browse all 60861

Re: VPN between USG and ERL won't stand up due to INVALID_MESSAGE_ID

$
0
0

Delete the tunnel mode config on the ERL. "delete vpn ipsec site-to-site peer WAN_IP-USG tunnel 1"

 

and add the VTI lines like shown in the USG's config. Also check the other VTI-related config on the USG ("show configuration commands | match vti") and replicate that, just changing the VTI IP to something different. 


Viewing all articles
Browse latest Browse all 60861

Trending Articles