How to Troubleshoot IKE VPN Error on Palo Alto Firewall

SymptomThis document explains the various error logs seen during the IPSec tunnel negotiation issues.  EnvironmentPA firewall version 8.1 and above ResolutionThe following debug is enabled to get the debug logs shown in the document. Primary-Tunnel is the IPSec tunnel name usually refers to the Phase 2.Primary-GW is the IKE Gateway that holds the Phase 1 settings.  Read More