BOVPN error after upgrade: "No response for IKE_SA_INIT request message"

Chris456 · January 10

Hello,

We got this error after upgrading our M270 cluster to the latest firmware 12.11.6 (from 12.11.4).

We then switched from M270 to M295 fireboxes. They were running fine on 2025.1.2 firmware. But when we upgraded them to v2025.1.4 we got the same error ("No response for IKE_SA_INIT request message") and the Branch Office VPN could not be established. So we downgraded them again.

Could it be that we have BOVPN settings that conflicts with the new firmware versions? Or what else could be the issue?

Thanks, Chris

Bruce_Briggs · January 10

Possibly this?

Firebox BOVPNs in error state after upgrade to Fireware v12.11.5 or v12.11.6
https://techsearch.watchguard.com/KB?type=Known Issues&SFDCID=kA1Vr000000EserKAC&lang=en_US

Chris456 · January 12

Hi Bruce,

Thanks for your hint. We haven't enabled LDAP Server for Certificate Verification though in the global VPN settings (as mentioned in the linked KB article). All of our BOVPNs are using pre-shared keys.

Something else must be wrong

Bruce_Briggs · January 12

Then open a support case on this if you haven't done so already.

Chris456 · January 12

I have done that. Thanks again!

BOVPN error after upgrade: "No response for IKE_SA_INIT request message"

Comments