-
Products
-
SonicPlatform
SonicPlatform is the cybersecurity platform purpose-built for MSPs, making managing complex security environments among multiple tenants easy and streamlined.
Discover More
-
-
Solutions
-
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn MoreFederalProtect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn More - Industries
- Use Cases
-
-
Partners
-
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
Learn MorePartner PortalAccess to deal registration, MDF, sales and marketing tools, training and more
Learn More - SonicWall Partners
- Partner Resources
-
-
Support
-
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn MoreSupport PortalFind answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn More - Support
- Resources
- Capture Labs
-
- Company
- Contact Us
Warning : "Traffic Selectors Unacceptable".
04/05/2024 
41 People found this article helpful
465,975 Views
Description
This article describes the Log message "Traffic Selector Unacceptable" in a IPSEC VPN tunnel.
Resolution
In a site-to-site VPN tunnel, if there is a mismatch in the networks defined for the VPN tunnel, it results in the "Traffic Selectors Unacceptable" warning message in the Logs.
Let us consider the following example :
A site-to-site VPN tunnel is created between SITE A and SITE B using MAIN MODE or AGGRESSIVE MODE or IKEv2 MODE .
LAN network on SITE A: 192.168.168.0/255.255.255.0
172.16.10.0/255.255.255.0
LAN network on SITE B: 10.10.10.0/255.255.255.0
In order to avoid a mismatch, Under the VPN > Network, verify that :
- On SITE A :
- LOCAL NETWORK - 192.168.168.0/255.255.255.0 (Zone - LAN)
172.16.10.0/255.255.255.0 (Zone - LAN) - REMOTE NETWORK - 10.10.10.0/255.255.255.0 (Zone - VPN)
- LOCAL NETWORK - 192.168.168.0/255.255.255.0 (Zone - LAN)
- ON SITE B :
- LOCAL NETWORK - 10.10.10.0/255.255.255.0 (Zone - LAN)
- REMOTE NETWORK - 192.168.168.0/255.255.255.0 (Zone - VPN)
172.16.10.0/255.255.255.0 (Zone - VPN)
- LOCAL NETWORK - 10.10.10.0/255.255.255.0 (Zone - LAN)
So, LOCAL NETWORK of SITE A should match the REMOTE NETWORK of SITE B, and REMOTE NETWORK of SITE A should match the LOCAL NETWORK of SITE B in order to prevent the Traffic Selector Unacceptable warning in logs.
NOTE: The IP addresses shown here are for example purposes only. Replace them with the IP addresses of your network.
Related Articles
- How to block like/comment/post/share features of Facebook using App Rules
- How to block various YouTube features using App Rules
- How can I enable or disable SonicWall firewall management access?
YES
NO