Before commencing IPSec VPN configuration, you must resolve jointly with your VPN peer the basic parameters so that IPSec VPN can be set up symmetrically in the two peers. If the IPSec VPN configuration in the two peers does not match, no VPN is created.
Note:
If you will be defining a peer-group which maintains a list of redundant peers, each of the peers in the group must be configured to match the Branch Gateway.
NAT Traversal, if your installation includes one or more NAT devices between the local and remote VPN peers. See Configuring global parameters.
See Configuring IPSec VPN logging for information on how to view IPSec VPN configuration in both peers so as to pinpoint the problem in case of a mismatch between the two peers.
