I am going to break my certificate VPN setup in this post and see what sort of log message we will get. If you are looking for how to set up a certificate based IPSEC VPN on SRX, you can check my other post. I have already an established the tunnel between those two peers
Read More »

During one of my IPSEC VPN tests using certificate authentication, I have received the following error which really baffled me: ike_find_public_key: Find public key for 192.168.1.1:500, id = No Id -> 192.168.2.1:500, id = fqdn(any:0,[0..19]=srx1.example.com) ikev2_fb_find_public_key_cb: Public key lookup failed, error 'Authentication failed' ike_policy_reply_find_public_key: Start 192.168.1.1:500 (Responder) 192.168.2.1:500 { b0c74fc4 ae9a22d3 - d1afb9e8 a67a0c00 [-1]
Read More »