Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] Which condition does the NetScreen device generate the 'Phase I :Retransmission limit has been reached' message?

0

0

Article ID: KB3472 KB Last Updated: 16 Sep 2020Version: 7.0
Summary:

This article explains which condition the NetScreen device generates the "re-trans timer expired" message and which condition generates the "Phase I :Retransmission limit has been reached " message.

Symptoms:

VPN is not passing Phase I.  In the 'debug ike detail' output, the following is reported:

  • IKE VPN negotiation failed
  • "re-trans timer expired"
  • "Phase I :Retransmission limit has been reached "
Solution:

For IKE Phase I and Phase 2 negotiation, when the NetScreen device does not receive a reply for any reason, it will send a re-transmit packet . 

The "Phase I :Retransmission limit has been reached" means the re-transmit limit has been reached.

The "re-trans timer expired" means that the re-transmit packet has no reply. It will re-transmit until the max re-try is reached.

Modification History:
2020-09-16: Article reviewed for accuracy; no changes required.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search