Support Support Downloads Knowledge Base Service Request Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Archive] How Do I Enable NAT Traversal (NAT-T)?



Article ID: KB4022 KB Last Updated: 04 Mar 2017Version: 11.0

NS-Remote VPN client is connected successfully to firewall, but NS-Remote client cannot pass traffic through the VPN.   What Are the Minimum Requirements for NAT Traversal?


Symptoms & Errors:

  • NetScreen-Remote client behind NAT device is not working
  • NS-Remote client Log Viewer reports error  "message not received!" in the Phase 1 negotiation:
       1-14: 15:24:13.167 My Connections\corporate - message not received! Retransmitting!
  • NS-Remote VPN client is connected successfully to firewall (SA is active), but NS-Remote client cannot pass traffic thru the VPN
  • Configuring NS-Remote client to have a public IP works, but then reconfiguring NS-Remote client, with private address and putting it behind NAT device, fails
  • Cannot send traffic across a VPN

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Security Alerts and Vulnerabilities

Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search