Re: Zywall2 Problem! VPN Phase2 (No proposal chosen)

wouldn't_at_youliketoknow.com
Date: 03/06/05 

Date: Sun, 06 Mar 2005 15:02:40 -0500

See here for what this means:
http://www.us.zyxel.com/support/knowledgebase1.php?indexFlagvalue=1045712494&level=3&upFlag=1023426091

The English in that article has been a bit butchered.,

In any case, it basically means that during phase 2 negotiation, 2 VPN
parameters, 1 at each end of the tunnel, did not match. Double check
that all your settings that are supposed to match on both endd do in
fact match.

Shplad

On Fri, 04 Mar 2005 23:07:21 GMT, "Maxymo" <m.a.x.y.m.o@tin.it> wrote:

>Help Me .....
>
>Vpn Client is SSH Sentinel.
>
>This is the problem
>
>1 03/04/2005 23:47:34 Send:[HASH][DEL] 192.168.1.254 212.216.139.xxx
>2 03/04/2005 23:47:34 Send:[HASH][NOTFY:NO_PROP_CHOSEN] 192.168.1.254
>212.216.139.xxxIKE
>3 03/04/2005 23:47:34 !! No proposal chosen 212.216.139.xxx192.168.1.254
>IKE
>4 03/04/2005 23:47:34 Start Phase 2: Quick Mode
>212.216.139.xxx192.168.1.254 IKE
>5 03/04/2005 23:47:34 Recv:[HASH][SA][NONCE][ID][ID]
>212.216.139.xxx192.168.1.254 IKE
>6 03/04/2005 23:47:33 Send:[HASH][ATTRIBUTE] 192.168.1.254
>212.216.139.xxxIKE
>7 03/04/2005 23:47:33 Phase 1 IKE SA process done 192.168.1.254
>212.216.139.xxxIKE
>8 03/04/2005 23:47:33 Send:[ID][HASH][NOTFY:INIT_CONTACT] 192.168.1.254
>212.216.139.xxxIKE
>9 03/04/2005 23:47:33 Recv:[ID][HASH][NOTFY:INIT_CONTACT]
>212.216.139.xxx192.168.1.254 IKE
>10 03/04/2005 23:47:33 Send:[KE][NONCE] 192.168.1.254 212.216.139.xxxIKE
>11 03/04/2005 23:47:32 Recv:[KE][NONCE] 212.216.139.xxx192.168.1.254 IKE
>12 03/04/2005 23:47:31 Send:[SA][VID] 192.168.1.254 212.216.139.xxxIKE
>13 03/04/2005 23:47:31 Recv:[SA][VID] 212.216.139.xxx192.168.1.254 IKE
>14 03/04/2005 23:47:31 Recv Main Mode request from [212.216.139.183]
>
>
>
>Thanks

Relevant Pages