Home | Site Map | Cisco How To |  Net How To | Wireless | Search | Forums | Services | Setup Guide | Careers | About Us | Contact Us|

INVALID-ID-INFORMATION

Invalid id!

Invalid ID information in message

Permit inbound but outbound

Event id 547 - IKE security association negotiation failed

Symptoms: 1. When attempting to setup IPSec VPN on a Windows, you experience a connection issue. Oakley.log list the message: “INVALID-ID-INFORMATION”.

2. When attempting to setup IPSec VPN on a hardware firewall or router, the log displays these messages: “invalid id!” or “Invalid ID information in message x.x.x.x”.

3. Phase 1 of the negotiation will complete, but at Phase 2 negotiation breaks down.

4. IP Security Monitor shows Permit inbound but outbound.

5. You may receive Event id 547 - IKE security association negotiation failed.

Cause: 1. This may be caused by a subnet size mismatch in the both sites.

2. Source address in one site doesn’t match the destination address in the other site.

Related Topics