Forum Discussion

Philippe_Page_2's avatar
Philippe_Page_2
Icon for Cirrus rankCirrus
Oct 17, 2016

Establishing IPsec between F5 Big-IP and Juniper

Good day,   I was trying to configure IPsec between our equipment (F5 Big-IP) and the other (Juniper) from our client. However, I can't seem to connect the 2. I'm using the IPsec Diagnostics as an...
application delivery
BIG-IP
ekaleido_26616's avatar
ekaleido_26616
Icon for Cirrocumulus rankCirrocumulus
Oct 17, 2016

If your source is really a 10. you will need to enable NAT Traversal. I suspect your peer does not route rfc1918 space back to you via an IPSec tunnel.

 

  • Philippe_Page_2's avatar
    Philippe_Page_2
    Icon for Cirrus rankCirrus
    Oct 18, 2016

    We enabled SNAT on the VLAN where the 10.4.4.101 IP is located. If that's the case, i'll try to inform the other end if they're configured with rfc1918. Any other suspicions as to why IPsec won't establish between the 2 devices?

     

  • Philippe_Page_2's avatar
    Philippe_Page_2
    Icon for Cirrus rankCirrus
    Oct 18, 2016

    I can't see the other end when issuing the command racoonctl -l show-sa isakmp and racoonctl -l1 show-sa internal