NO_PROPOSAL_CHOSEN Ipsec tunnel between ASA 9.1x and Palo Alto

[tryingtofixit]

using Ikev2, phase 1 comes up with no issues.

PA side is getting "NO_PROPOSAL_CHOSEN".

ASA side is getting "IKEv2 Negotiation aborted due to ERROR: Failed to find a matching policy".

All our phase1 and phase2 match.

yes, PRF is set, I have PRF set for Sha256.

Does the PA need to set a value for their PRF? I don't recall it does

Suggestions?

[MHM Cisco World]

debug crypto ikev2 platform 127

 share this if you sure that phaseI is ok if not share alos below 

debug crypto ikev2 protocol 127

please do debug one by one not both in same time, to make us know this packet for which phase

MHM 

[tryingtofixit]

will do when I get some traffic initiated from the other side.  This is a pull from other side.