topic VPN - Invalid SA protocol type: 0 in Network Security

VPN - Invalid SA protocol type: 0

kri.chi.85 — Tue, 12 Mar 2019 00:40:38 GMT

Hi,

Can one say why do below error occurs at IKE phase 1 negotation:

[Cisco] [IKE] ERROR: Invalid SA protocol type: 0

[Cisco] [IKE] ERROR: Phase 2 negotiation failed due to time up waiting for phase1.

[Cisco] [IKE] ERROR: Phase 1 negotiation failed due to time up for X.X.X.X [500]. 422f813f94ab9c96:0000000000000000

Thanks in advance!!!!....

Chaitanya.G

Ganesan Palaniappan — Mon, 24 Dec 2012 17:44:55 GMT

Hi,

I feel there is a mismatch in the lifetime parameters.( either phase1 or phase 2 ..mostly as per the output u showed ..it lies on phase 1)

Check and let me know !!!

Regards,

Gan

4telephone — Mon, 24 Dec 2012 19:25:43 GMT

I have the same error currently trying to connect to a SONICWALL TZ-100. I can't connect. Did you resolve it or are you still fighting?

andduart — Wed, 26 Dec 2012 20:15:35 GMT

Hello,

Please send the show crypto isakmp sa at a time to initiate the connection. Do you have Nat-t enabled? crypto isakmp nat-traversal 30