ASG320 v7.504. When I try to create a new IPSec Remote Gateway with a Preshared Key, I get a pop-up saying "Invalid Object Parameter" and the "Key" field flashes.
If "Key" and "Repeat" are different, the popup says that they don't match. I've tried several different 12-character random alphanumeric strings, and plain numbers and plain letters. I have tried varying the name, varying or omitting the remote subnets, even rebooting the ASG320, as painful as that was (all the other remotes came down) all to no avail.
The same process to create the remote gateway works fine on the ASG120 at the other end, and it has worked here before.
I have just removed the ACC deployed VPN (wasn't flexible enough for the remote subnets) and I'm now attempting to recreate the configuration manually.
This problem is being experienced on my main ASG320 v7.504, with a handful of other SSL and IPSec tunnels.
I have opened a support ticket with ASG, but thought I'd ask here incase it's a common problem.
If by common you mean whether any of the rest of us have made the same mistake... If I understand your situation, I have!
You only can have a single PSK for all of your IPsec connections. It's more secure to use certificates, and you can have a different one for each connection. A recommended best-practice with PSKs is to change them on a regular basis; changing is not required for connections depending on certificates.
Was that it?
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
Is this correct that I can't create an IPSEC tunnel with a different preshared key? I need the original tunnel, and don't know what that key is to create a new one. Amazing these Astaro's can be, hmmm.
Sorry, my comment was incomplete. I think you can have different PSKs if the Remote Gateway definitions on both sides are "initiate connection" instead of "Respond Only". It is recommended that you use RSA keys if you arent going to use certificates. Here are links to the relevant KnowledgeBase articles:
Quote