Cisco Systems IPSEC Tunnel - LAN TO LAN - 3DES - SHA1 - 3K CONCENTRATOR to BEFSX41 ( LINKSYS )

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
IPSEC Tunnel - LAN TO LAN - 3DES - SHA1 - 3K CONCENTRATOR to BEFSX41 ( LINKSYS ) none@set.yet 09-11-06
Posted by none@set.yet on September 11, 2006, 12:54 pm
Please log in for more thread options
2006-09-10 01:59:54        Local6.Notice        192.168.1.250        10614 09/10/2006 01:59:54.480
SEV=4 IKE/119 RPT=222 x.x.x.x Group
[x.x.x.x] PHASE 1 COMPLETED


2006-09-10 02:00:50        Local6.Warning        192.168.1.250        10616 09/10/2006 02:00:50.350
SEV=3 IKE/134 RPT=19 x.x.x.x
Group [x.x.x.x] Mismatch: Configured LAN-to-LAN proposal differs from negotiated
proposal. Verify local and remote
LAN-to-LAN connection lists.


2006-09-10 02:00:50        Local6.Notice        192.168.1.250        10618 09/10/2006 02:00:50.350
SEV=4 IKE/119 RPT=223 x.x.x.x Group
[x.x.x.x] PHASE 1 COMPLETED

notice the local6.warning

Is there a difference in the way the Linksys and Cisco devices handle the Phase
I ISAKMP negotiation parameters?


This is syslog snipet from 3K concentrator doing lan-to-lan session to a remote
site on a dsl connection with a
BEFSX41




--
--------------------------------- --- -- -
Posted with NewsLeecher v3.7 Final
Web @ http://www.newsleecher.com/?usenet
------------------- ----- ---- -- -


Posted by Walter Roberson on September 11, 2006, 1:43 pm
Please log in for more thread options
none@set.yet <Newsleecher> wrote:
>2006-09-10 02:00:50        Local6.Warning        192.168.1.250        10616 09/10/2006
>02:00:50.350 SEV=3 IKE/134 RPT=19 x.x.x.x
>Group [x.x.x.x] Mismatch: Configured LAN-to-LAN proposal differs from
>negotiated proposal. Verify local and remote
>LAN-to-LAN connection lists.

My reading of that would be that the access-list on the Cisco side
might not match the gui-entered destinations on the BEFSX41 side.

Similar ThreadsPosted
IPSEC Tunnel - LAN TO LAN - 3DES - SHA1 - 3K CONCENTRATOR to BEFSX41 ( LINKSYS ) September 11, 2006, 12:54 pm
PIX 501 -> Linksys BEFSX41 via IPSec October 11, 2005, 8:11 am
IPsec tunnel between Concentrator 3000 behind pix and Firebox X700's February 28, 2008, 6:29 pm
[Linksys/Cisco BEFSX41] Connected DSL, ping works, all DNS queries fail August 12, 2007, 4:48 am
lan-lan tunnel, pix-concentrator May 30, 2006, 11:30 am
tunnel snmp through vpn concentrator February 10, 2005, 9:37 am
PIX & VPN Concentrator LAN-to-LAN Tunnel Disconnected November 16, 2006, 10:01 am
L2L tunnel, concentrator 3000 to PIX ? May 1, 2008, 11:34 am
Cisco PIX 515E and Linksys WRV 200 VPN Tunnel November 28, 2006, 4:09 am
Cisco 837 IPSEC Linksys WAG54g July 11, 2005, 5:37 pm
connect lynksys rvl200 to cisco concentrator in IPSEC ? October 3, 2007, 12:19 pm
linksys rv042 +cisco 2600 +ipsec +two subnets April 21, 2006, 9:14 am
IPSEC Tunnel Goes Down July 10, 2006, 5:51 am
IPSEC Tunnel Down July 12, 2006, 4:20 am
PIX-to-PIX IPSec VPN Tunnel July 21, 2006, 7:29 pm