Zywall2 Problem! VPN Phase2 (No proposal chosen)

Mar 05, 2005 2 Replies

Help Me .....



Vpn Client is SSH Sentinel.



This is the problem


1 03/04/2005 23:47:34 Send:[HASH][DEL] 192.168.1.254 212.216.139.xxx
2 03/04/2005 23:47:34 Send:[HASH][NOTFY:NO_PROP_CHOSEN] 192.168.1.254
212.216.139.xxxIKE
3 03/04/2005 23:47:34 !! No proposal chosen 212.216.139.xxx192.168.1.254 IKE
4 03/04/2005 23:47:34 Start Phase 2: Quick Mode
212.216.139.xxx192.168.1.254 IKE
5 03/04/2005 23:47:34 Recv:[HASH][SA][NONCE][ID][ID]
212.216.139.xxx192.168.1.254 IKE
6 03/04/2005 23:47:33 Send:[HASH][ATTRIBUTE] 192.168.1.254
212.216.139.xxxIKE
7 03/04/2005 23:47:33 Phase 1 IKE SA process done 192.168.1.254
212.216.139.xxxIKE
8 03/04/2005 23:47:33 Send:[ID][HASH][NOTFY:INIT_CONTACT] 192.168.1.254
212.216.139.xxxIKE
9 03/04/2005 23:47:33 Recv:[ID][HASH][NOTFY:INIT_CONTACT]
212.216.139.xxx192.168.1.254 IKE
10 03/04/2005 23:47:33 Send:[KE][NONCE] 192.168.1.254 212.216.139.xxxIKE
11 03/04/2005 23:47:32 Recv:[KE][NONCE] 212.216.139.xxx192.168.1.254 IKE
12 03/04/2005 23:47:31 Send:[SA][VID] 192.168.1.254 212.216.139.xxxIKE
13 03/04/2005 23:47:31 Recv:[SA][VID] 212.216.139.xxx192.168.1.254 IKE
14 03/04/2005 23:47:31 Recv Main Mode request from [212.216.139.183]


Thanks


See here for what this means:

formatting link
The English in that article has been a bit butchered.,

In any case, it basically means that during phase 2 negotiation, 2 VPN parameters, 1 at each end of the tunnel, did not match. Double check that all your settings that are supposed to match on both endd do in fact match.

Shplad

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required