[robori]

Hello guys,

I have a site-to-site VPN between one partner company and the Remote Access VPN (SecuRemote) in the same firewall. It´s running Ngx R60.

I´ve been receiving the error "Packet dropped due to no valid SA" in the logs, the problem is intermitent, and I think it´s because of the way Encryption domains are configured.

In the site-to-site VPN, the remote network is smth like 150.95.132.0/24 and this is configured in the Encryption domain for the firewall. However, in my Remote Access VPN (SecuRemote), there´s network 150.95.0.0/16 in the Encryption domain. It´s kindda wierd but it´s setup like this.

Do you think this overlapping encryption domain could be the reason why I´m getting the Ipsec SA errors ?


Please help me if you have any ideas!


Thanks in advance,
Robori