IPSEC/2/IKE_WL_NEGO_FAIL: IPSec negotiation failed due to pki whitelist.(Peer=[PeerIP], CN=[CommonNameValue], Vrf=[VrfName], Port=[PortNumber])
In VS mode, this log is supported only by the admin VS.
| Parameter Name | Parameter Meaning |
|---|---|
|
PeerIP |
Peer Ip address |
|
CommonNameValue |
Common name value |
|
VrfName |
Vrf instance name |
|
PortNumber |
UDP port number |
Check whether the peer certificate is valid. If the peer certificate is invalid, obtain a valid one.
Check whether the local whitelist data is correct. If the data is incorrect, update it.