GitHub user PPisz added a comment to the discussion: vpn - Peer requested tunnel 1 twice, ignoring second one
The cause was incorrect routing on the VR. The primary public IP was from one addressing, and the IP on which the SNAT was located was from a different addressing (and the default gw was set to that addressing). The VPN wouldn't connect because responses to the client were coming from the SNAT IP, not the primary IP. The solution was to swap the primary IP so that all public IPs were from the same network. GitHub link: https://github.com/apache/cloudstack/discussions/11224#discussioncomment-14001213 ---- This is an automatically sent email for users@cloudstack.apache.org. To unsubscribe, please send an email to: users-unsubscr...@cloudstack.apache.org