Hi, Can one say why do below error occurs at IKE phase 1 negotation: [Cisco] [IKE] ERROR:  Invalid SA protocol type: 0 [Cisco] [IKE] ERROR:  Phase 2 negotiation failed due to time up waiting for phase1. [Cisco] [IKE] ERROR:  Phase 1 negotiation failed due to time up for X.X.X.X [500]. 422f813f94ab9c96:0000000000000000 Thanks in advance!!!!.... Chaitanya.G ... View more

Dear Team, I have SA540 firewall with me, I am trying to enable a site-to-site VPN between Fortigate 50B and SA540. I am facing issues with the setup. Please say if any license is required for bringing uo the site to site IPSEC tunnel. Please find the below error logs and the screen shoot generated while bringing up the tunnel in sa540: Sat Dec 22 18:22:26 2012 (GMT +0530): [Cisco] [IKE] INFO:  accept a request to establish IKE-SA: (Fortigate IP) Sat Dec 22 18:22:26 2012 (GMT +0530): [Cisco] [IKE] INFO:  Configuration found for (Fortigate IP). Sat Dec 22 18:22:26 2012 (GMT +0530): [Cisco] [IKE] INFO:  Configuration found for (Fortigate IP). Sat Dec 22 18:22:26 2012 (GMT +0530): [Cisco] [IKE] INFO:  Initiating new phase 1 negotiation: (SA540 IP)[500]<=>(Fortigate IP)[500] Sat Dec 22 18:22:26 2012 (GMT +0530): [Cisco] [IKE] INFO:  Beginning Identity Protection mode. Sat Dec 22 18:22:26 2012 (GMT +0530): [Cisco] [IKE] INFO:   [isakmp_ident.c:185]: XXX: NUMNATTVENDORIDS: 3 Sat Dec 22 18:22:26 2012 (GMT +0530): [Cisco] [IKE] INFO:   [isakmp_ident.c:189]: XXX: setting vendorid: 4 Sat Dec 22 18:22:26 2012 (GMT +0530): [Cisco] [IKE] INFO:   [isakmp_ident.c:189]: XXX: setting vendorid: 8 Sat Dec 22 18:22:26 2012 (GMT +0530): [Cisco] [IKE] INFO:   [isakmp_ident.c:189]: XXX: setting vendorid: 9 Sat Dec 22 18:22:57 2012 (GMT +0530): [Cisco] [IKE] ERROR:  Invalid SA protocol type: 0 Sat Dec 22 18:22:57 2012 (GMT +0530): [Cisco] [IKE] ERROR:  Phase 2 negotiation failed due to time up waiting for phase1. Sat Dec 22 18:23:14 2012 (GMT +0530): [Cisco] [IKE] INFO:  Using IPsec SA configuration: 192.168.1.0/24<->192.168.15.0/24 Sat Dec 22 18:23:14 2012 (GMT +0530): [Cisco] [IKE] INFO:  Configuration found for (Fortigate IP). Sat Dec 22 18:23:14 2012 (GMT +0530): [Cisco] [IKE] INFO:  Configuration found for (Fortigate IP). Sat Dec 22 18:23:45 2012 (GMT +0530): [Cisco] [IKE] ERROR:  Phase 2 negotiation failed due to time up waiting for phase1. ESP (Fortigate IP)->(SA540 IP) Sat Dec 22 18:24:16 2012 (GMT +0530): [Cisco] [IKE] ERROR:  Phase 1 negotiation failed due to time up for (Fortigate IP)[500]. 367261e23cbb24a2:0000000000000000 Sat Dec 22 18:24:27 2012 (GMT +0530): [Cisco] [IKE] INFO:  Using IPsec SA configuration: 192.168.1.0/24<->192.168.15.0/24 Sat Dec 22 18:24:27 2012 (GMT +0530): [Cisco] [IKE] INFO:  Configuration found for (Fortigate IP). Sat Dec 22 18:24:27 2012 (GMT +0530): [Cisco] [IKE] INFO:  Configuration found for (Fortigate IP). Sat Dec 22 18:24:27 2012 (GMT +0530): [Cisco] [IKE] INFO:  Initiating new phase 1 negotiation: (SA540 IP)[500]<=>(Fortigate IP)[500] Sat Dec 22 18:24:27 2012 (GMT +0530): [Cisco] [IKE] INFO:  Beginning Identity Protection mode. Sat Dec 22 18:24:27 2012 (GMT +0530): [Cisco] [IKE] INFO:   [isakmp_ident.c:185]: XXX: NUMNATTVENDORIDS: 3 Sat Dec 22 18:24:27 2012 (GMT +0530): [Cisco] [IKE] INFO:   [isakmp_ident.c:189]: XXX: setting vendorid: 4 Sat Dec 22 18:24:27 2012 (GMT +0530): [Cisco] [IKE] INFO:   [isakmp_ident.c:189]: XXX: setting vendorid: 8 Sat Dec 22 18:24:27 2012 (GMT +0530): [Cisco] [IKE] INFO:   [isakmp_ident.c:189]: XXX: setting vendorid: 9 Sat Dec 22 18:24:58 2012 (GMT +0530): [Cisco] [IKE] ERROR:  Phase 2 negotiation failed due to time up waiting for phase1. ESP (Fortigate IP)->(SA540 IP) Sat Dec 22 18:25:27 2012 (GMT +0530): [Cisco] [IKE] INFO:  Using IPsec SA configuration: 192.168.1.0/24<->192.168.15.0/24 Sat Dec 22 18:25:27 2012 (GMT +0530): [Cisco] [IKE] INFO:  Configuration found for (Fortigate IP). Sat Dec 22 18:25:27 2012 (GMT +0530): [Cisco] [IKE] INFO:  Configuration found for (Fortigate IP). Thank you guys, Chaitanya.G ... View more

Dear Team, I am having 2960 switch and one port is configured with a VLAN and connected with an unmanageable switch and further one more unmanageable switch was connected to the primary unmanageable switch… The topology will be    2960 switch -> unmanageable Switch -> unmanageable -> PC connected The issue I am facing most of the PC are getting IP addresses through DHCP server and very few 5 or 6 PC’s out are not getting the IP from DHCP server. If I switch of the switch and switch on the issue is resolved for those and it will raise for some other PC’s. Thanks you team...... ... View more

Dear Team, I am having 2960 switch and one port is configured with a VLAN and connected with an unmanageable switch and further one more unmanageable switch was connected to the primary unmanageable switch… The topology will be    2960 switch -> unmanageable Switch -> unmanageable -> PC connected The issue I am facing most of the PC are getting IP addresses through DHCP server and very few 5 or 6 PC’s out are not getting the IP from DHCP server. If I switch of the switch and switch on the issue is resolved for those and it will raise for some other PC’s. Thanks you team...... ... View more

Dear Tech Team,      I configure 3750 stack switch as core and 2960 stack switches as access layer switches. I connected my laptop to one of my core stack in VLAN 10 and I am pinging to one of my server in VLAN 1. Can someone say me what will be the minimum latency at the time of inter VALN routing Thank you Team. ... View more

Dear Tech Team,      I configure 3750 stack switch as core and 2960 stack switches as access layer switches. I connected my laptop to one of my core stack in VLAN 10 and I am pinging to one of my server in VLAN 1. Can someone say me what will be the minimum latency at the time of inter VALN routing Thank you Team. ... View more

Dear Exports, I have a query with Policy Based Routing. I attached the topology diagram to this query, and the configuration file conatins configuration of each Router. I am not able to ping from LAN1(192.168.1.1) to ISP2 (11.11.11.2) and from LAN2(192.168.2.1) to ISP1(10.10.10.2). why this is happening. Please explain me why this is happening . . . . . . . With Regrds, Chaitanya.G ... View more

Dear Tech Gurus,        Can any one help me regarding channel assignament at root and mesh access points. will the channel be same on all RAPS and MAPS (5Ghz). With Regards, Chaitanya.G ... View more

Dear Tech gurus, My Devices:      Will 2811 Router with 4 switch port module Problems:      How to do dual ISP configuration on this router. Please help me out.... ... View more