Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] IKEv2 support for IPv6

0

0

Article ID: KB16268 KB Last Updated: 09 Aug 2017Version: 5.0
Summary:
This article explains that IKEv2 for IPv6 is not supported in ScreenOS.
Symptoms:
  • The IPv6 and IKEv2 configuration is configurable in ScreenOS 6.3 and earlier, but the IPSec session looks usable.  
  • The firewall (NS/ SSG) crashes continuously; displaying the following trace dump on the console:

    Trace:
    00380de8 48d11690 00715724 00744a3c 007457e0 0085f2cc 0085fa20 0085fc38
    008596e0 00859ad4 0084d7c0 00386abc

    The trace indicates that the cause of the crash is IKEv2.
Cause:

The trace indicates that the cause of the crash is IKEv2.

Solution:

ScreenOS supports IKEv1-IPv4/IPv6 and IKEv2-IPv4. ScreenOS does not officially support IKEv2 with IPv6.

To resolve the trace dump issue, remove IKEv2-IPv6 from the configuration OR use IKEv1 instead of v2.

Modification History:

2017-7-28: Removed references to 6.4 

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search