Scenario : VPN between : Cisco 837 ----> Cisco VPN3000 From Cisco VPN3000 we read this log :
Phase 1 failure against global IKE proposal # 8: Mismatched attr types for class Auth Method: Rcv'd: Preshared Key Cfg'd: XAUTH with Preshared Key (Initiator authenticated)
What's mean ?????
Thanx a lot Dan
It means that the side that generated this message is set to expect XAUTH style authentication and the device calling in in set to use a preshared key.
The methods are incompatible, hence the reject.
You either need to :
- Program the 837 to use XAUTH (EZ VPN)
- Program the VPN3000 to work with a simple shared key for the 837.
Thanx for the quick response .... But just one newbie question. Which are the command for configure XAUTH on 837 (without web interface) or config VPN300 (with web interface) ?
Thank you
The problem was wrong ACL. I added acl with some protocols like GRE AHP ESP and UDP and I didn't the error message.
Have something to add? Share your thoughts — no account required.
Ask the community — no account required