Juniper Networks - Need help troubleshooting my NetScreen-Remote VPN - Knowledge Base

Browse Knowledge Base Categories

Printer Friendly

Need help troubleshooting my NetScreen-Remote VPN

Knowledge Base ID:	KB7734
Version:	2.0
Published:	07 Oct 2008
Updated:	07 Oct 2008
Categories:	IPSec NS_Remote_Security NS_Remote_VPN_Client

Synopsis:

The links below provide assistance with troubleshooting a NetScreen-Remote VPN configuration.

Solution:

Follow the Question/Answer links below for assistance with troubleshooting the NetScreen-Remote VPN:

Step 1	Can you PING the remote firewall public interface IP Address? [How do I do this?]	If [Yes], go to Step 2
		If [No], is PING management enabled on the public interface of the firewall? If [No], Click the appropriate interface for instructions on how to enable the functionality on the Public Interface or Trust Interface.
Step 2	Can you perform an extended PING from the trust network to the remote gateway's trust interface? [How do I do this?]	If [Yes], go to Step 3
		If [No], consult the following links for further assistance: How do I find the VPN Entry in the Event Log? How do I Edit Policies referencing a VPN? How do I ensure that the Phase 1 Proposals on both sides of a VPN Match? How do I check the Phase 2 Proposals on both sides of a VPN? How do I ensure that Pre-shared keys match Phase 1 configuration? How do I ensure that the Outgoing VPN Interfaces configured in Phase 1 match?
Step 3	Consult the following links for additional assistance: How do I resolve VPN connectivity problems? Why can't I see some computers in Microsoft's network neighborhood over a VPN?

Purpose:

Troubleshooting