topic Re: PIX with Draytek 2900 in Network Security

PIX with Draytek 2900

alexander.ott — Fri, 21 Feb 2020 08:30:36 GMT

HI all,

I'm trying to get a Draytek Vigor 2900 to talk through ipsec vpn to a PIX 515E running OS7.0.4. The pix has a fixed IP-Address and the Vigor has a DSL-Line connected providing changing addresses. The PIX-Log tells me "All IPSec SA proposals found unacceptable!" after the connection to the dynamic map and the default L2L-Group.

Can anybody give me a hint what to do?

Every help is welcome.

Thanks in advance

Regards

Alexander Ott

Re: PIX with Draytek 2900

b.hsu — Fri, 11 Nov 2005 15:07:20 GMT

The issue may be due to

IKE: Failing on Phase 1 negotiation

Group [3002group]

authentication required but selected Proposal does not support authentication,

Check priorities of IKE xauth proposals in IKE proposal list.

Re: PIX with Draytek 2900

alexander.ott — Mon, 14 Nov 2005 07:49:50 GMT

Hi,

thanks for your answer.

Finally we got another hint which solved the problem. Actually the proposals were wrong. The Draytek was set to "no pfs" which was not abbreviated in the Draytec's html-page. So we set the pix to "no pfs" and finally it worked.

Thanks

Alex