Overview
While trying to configure the IPSec VPN tunnel from Kerio Control to the remote site, the remote networks tab is returning an Invalid network error with Network address x.x.x.x does not match the mask 255.255.255.252 message.
When filling out custom VPN route details like network and mask, the error is being generated. The route lines are being highlighted in red color.
This article provides information on how to resolve this error.
Solution
Depending on your IP address, the subnet and mask values should be defined differently. The CIDR /30 requires a decimal netmask equal to 255.255.255.252. For more information about different subnets, please refer to RFC1878.
- Open subnet CIDR calculator website and specify the IP address and CIDR netmask. The website will return the correct attributes.
- In Kerio Control, specify the correct IP address and network mask based on the Subnet calculator data, CIDR network (Route) value.
