https://community.cisco.com/t5/wireless/ipsec-server-behind-the-nat/m-p/1022130#M188875 <P>Hi,</P><P></P><P>I try to set up Ciscio 850 router behind the nat and allow clients to create VPN tunnels to it. I forwarded ports UDP 500 and UDP 4500 on NAT router to Cisco device. I get the following error on IKE phase 2: ISAKMP:(2022): IPSec policy invalidated proposal with error 1024. What does it means and how to fix it? This proposal is accepted when i make direct connection to Cisco device without nat presence!</P><P></P><P> </P><P></P> Sat, 03 Jul 2021 22:30:56 GMT Algirdasss 2021-07-03T22:30:56Z https://community.cisco.com/t5/wireless/ipsec-server-behind-the-nat/m-p/1022130#M188875 <P>Hi,</P><P></P><P>I try to set up Ciscio 850 router behind the nat and allow clients to create VPN tunnels to it. I forwarded ports UDP 500 and UDP 4500 on NAT router to Cisco device. I get the following error on IKE phase 2: ISAKMP:(2022): IPSec policy invalidated proposal with error 1024. What does it means and how to fix it? This proposal is accepted when i make direct connection to Cisco device without nat presence!</P><P></P><P> </P><P></P> Sat, 03 Jul 2021 22:30:56 GMT https://community.cisco.com/t5/wireless/ipsec-server-behind-the-nat/m-p/1022130#M188875 Algirdasss 2021-07-03T22:30:56Z