Trying to establish IPSec VPN between Cisco PIX and a Mikrotik router.
Cisco indicates that the reserved not zero on payload/malformed payload errors are due to a mismatch on the secret key and/or mismatch of hash/algorith, etc. However, I have reviewed this settings and both sides match...
Anyone know what else this could mean??
Here is the debug:
crypto_isakmp_process_block:src:aa.aa.aa.aa, dest:bb.bb.bb.bb spt:500 dpt:500 OAK_MM exchange ISAKMP (0): processing SA payload. message ID = 0
ISAKMP (0): Checking ISAKMP transform 1 against priority 20 policy ISAKMP: life type in seconds ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80 ISAKMP: encryption 3DES-CBC ISAKMP: auth pre-share ISAKMP: hash MD5 ISAKMP: default group 2 ISAKMP (0): atts are acceptable. Next payload is 0 ISAKMP (0): SA is doing pre-shared key authentication using id type ID_FQDN return status is IKMP_NO_ERROR crypto_isakmp_process_block:src:aa.aa.aa.aa, dest:bb.bb.bb.bb spt:500 dpt:500 OAK_MM exchange ISAKMP (0): processing KE payload. message ID = 0
ISAKMP (0): processing NONCE payload. message ID = 0
ISAKMP (0): processing vendor id payload
return status is IKMP_NO_ERROR crypto_isakmp_process_block:src:aa.aa.aa.aa, dest:bb.bb.bb.bb spt:500 dpt:500 OAK_MM exchange ISAKMP (0): processing ID payload. message ID = 0 ISAKMP (0): processing HASH payload. message ID = 0 ISAKMP (0): SA has been authenticated
ISAKMP (0): ID payload next-payload : 8 type : 2 protocol : 17 port : 500 length : 18 ISAKMP (0): Total payload length: 22 return status is IKMP_NO_ERROR ISAKMP (0): sending INITIAL_CONTACT notify ISAKMP (0): sending NOTIFY message 24578 protocol 1 ISAKMP (0): sending phase 1 RESPONDER_LIFETIME notify ISAKMP (0): sending NOTIFY message 24576 protocol 1 VPN Peer: ISAKMP: Added new peer: ip:aa.aa.aa.aa/500 Total VPN Peers:1 VPN Peer: ISAKMP: Peer ip:aa.aa.aa.aa/500 Ref cnt incremented to:1 Total VPN Peers:1 crypto_isakmp_process_block:src:aa.aa.aa.aa, dest:bb.bb.bb.bb spt:500 dpt:500 ISAKMP: reserved not zero on payload 5! ISAKMP: malformed payload crypto_isakmp_process_block:src:aa.aa.aa.aa, dest:bb.bb.bb.bb spt:500 dpt:500 ISAKMP: reserved not zero on payload 5! ISAKMP: malformed payload crypto_isakmp_process_block:src:aa.aa.aa.aa, dest:bb.bb.bb.bb spt:500 dpt:500 ISAKMP: reserved not zero on payload 5! ISAKMP: malformed payload