Start a conversation

Invalid network: network address does not match the mask

Overview

While trying to configure the IPSec VPN tunnel from Kerio Control to the remote site, the remote networks tab is returning an Invalid network error with Network address x.x.x.x does not match the mask 255.255.255.252 message.

network_error.png

When filling out custom VPN route details like network and mask, the error is being generated. The route lines are being highlighted in red color.

This article provides information on how to resolve this error.

Solution

Depending on your IP address, the subnet and mask values should be defined differently. The CIDR /30 requires a decimal netmask equal to 255.255.255.252. For more information about different subnets, please refer to RFC1878.

  1. Open subnet CIDR calculator website and specify the IP address and CIDR netmask. The website will return the correct attributes.
    Screen_Shot_2020-12-29_at_2.59.33_PM.png
  2. In Kerio Control, specify the correct IP address and network mask based on the Subnet calculator data, CIDR network (Route) value.
    correct_network.png
Choose files or drag and drop files
Was this article helpful?
Yes
No
  1. Priyanka Bhotika

  2. Posted
  3. Updated

Comments