Check_Point
156-582 · Question #55
A VPN tunnel intermittently fails after renegotiation. Debug shows: "Invalid SPI."
The correct answer is C. Wrong Phase-2 timers. On rekey mismatch, gateways accept wrong SPI → drop packets.
Troubleshooting NAT and VPN Issues
Question
A VPN tunnel intermittently fails after renegotiation. Debug shows: "Invalid SPI."
Options
- ARouting missing
- BDPD disabled
- CWrong Phase-2 timers
- DNAT-T misconfigured
How the community answered
(56 responses)- A14% (8)
- B7% (4)
- C73% (41)
- D5% (3)
Explanation
On rekey mismatch, gateways accept wrong SPI → drop packets.
Topics
#VPN renegotiation#Invalid SPI#IPSec Phase 2#IKE timers
Community Discussion
No community discussion yet for this question.