VPN: Inability to connect with GVC using local certificate due to "invalid cert ID"

Description

VPN: Inability to connect with GVC using local certificate due to "invalid cert ID"

Resolution

Make sure the peer ID information for the local certificate selected in VPN > Settings > GroupVPN matches the certificate imported into GVC:

  1. Select VPN > Settings > GroupVPN > Edit.
  2. Select IKE using 3rd Party Certificates from the IPSec Keying Mode menu.
  3. Select a certificate from the Gateway Certificate menu.
  4. Select a Peer ID type from the Peer ID Type menu.
  5. Correct or enter the Peer ID filter information in the Peer ID Filter field.

Peer ID types and their information must be entered exactly as found in the data section of the local certificate imported into GVC or the client won't be able to establish a tunnel. Keep the following in mind when entering peer ID information:

  1. If the "E-Mail ID and Domain Name" Peer ID Type is being entered, do not enter / into the domain name field.
  2. If the "Distinguished Name" Peer ID Type is being entered, be sure elements such as "cn", "o" and "ou" are always lowercase.
  3. All other values are case sensitive and must be entered exactly as originally specified in the certificate request.

Make sure the certificate imported into GVC matches one selected on the Gateway Certificates menu found at VPN > Settings > GroupVPN > Edit. These certificates must match and may not be swapped among different installed copies of GVC.

Related Articles

  • How to block ICMP (Ping ) using Application control
    Read More
  • SonicWall GEN8 TZ and NSa Firewalls FAQ
    Read More
  • How to configure Link Aggregation
    Read More
not finding your answers?