VPN - Invalid SA protocol type: 0

[kri.chi.85]

Hi,

Can one say why do below error occurs at IKE phase 1 negotation:

[Cisco] [IKE] ERROR:  Invalid SA protocol type: 0

[Cisco] [IKE] ERROR:  Phase 2 negotiation failed due to time up waiting for phase1.

[Cisco] [IKE] ERROR:  Phase 1 negotiation failed due to time up for X.X.X.X [500]. 422f813f94ab9c96:0000000000000000

Thanks in advance!!!!....

Chaitanya.G

[Ganesan Palaniappan]

Hi,

I feel there is a mismatch in the lifetime parameters.( either phase1 or phase 2 ..mostly as per the output u showed ..it lies on phase 1)

Check and let me know !!!

Regards,

Gan

[4telephone]

I have the same error currently trying to connect to a SONICWALL TZ-100. I can't connect. Did you resolve it or are you still fighting?

[andduart]

Hello,

Please send the show crypto isakmp sa at a time to initiate the connection. Do you have Nat-t enabled? crypto isakmp nat-traversal 30