Menu

Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

Sign In Register

What is error code 33

ShareOneIncShareOneInc Newbie ✭
in Mid Range Firewalls

Trying to create a VPN tunnel between Sonicwall and a Fortigate. I keep seeing an error in the log -

"…Type: ID Init Payload; Error: 33" It is followed by an ID does not match error. I have verified that the ID information is correct. Any help is appreciated.

Category: Mid Range Firewalls
Reply

Best Answer

  • CORRECT ANSWER
    ShareOneIncShareOneInc Newbie ✭
    Answer ✓

    Resolved: Customer on a Fortigate behind a Velo SD-WAN which NATs the WAN IP of the Fortigate. We configured a site-to-site VPN but it would not complete Phase 1. Customer had entered the NAT'd WAN IP as Local IKE ID and I entered that on the Sonicwall as Remote IKE ID. Sonicwall kept kept showing an ID mismatch. Customer removed the Local IKE Id entry allowing it to default to the actual WAN IP and I entered that as the Remote IKE ID. The tunnel came up immediately.

Answers

  • MarkDMarkD Cybersecurity Overlord ✭✭✭

    There is too little information provided

    Check the P1 and P2 parameters especially when talking things like DH21 etc both have different terminology

    Check proxy ID's / Encryption Domains

    Check the logs on both devices an provide more information

Sign In or Register to comment.