Description

This article explains a scenario where the JSC client connection is not working with SRX devices.

Symptoms

  1. JSC clients fail to connect to the SRX giving out below error:
    "Connection to VPN Gateway failed. Please check your internet connection". 
  2. On the SRX we see the VPN fails to establish with error 'IKEv1 Error: No proposal chosen'.
  3. Restarting the IPSEC key-management has no effect.

Solution

When there are more than one ike gateways configured on the SRX device with same local address, the JSC client device may get an address conflict and may not use the correct IP for the JSC ike gateway resulting in connection failure. Thus, it is recommended to use separate local address for the JSC ike gateway.

Modification History

11-Jan-2023 : Article Created
31-Jan-2025: Article modified