Hi, I have a router 1701 with a VPN tunnel with a peer. But I have a PC with a Nortel VPN client to connect to another peer and it doesn't work. If a uninstall the crypto map then the client works fine. I don't understand why. The router has the following version: Version 12.2(13)ZH, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1) Synched to technology version 12.2(14.5)T ROM: System Bootstrap, Version 12.2(7r)XM1, RELEASE SOFTWARE (fc1) ROM: C1700 Software (C1700-K9O3SY7-M), Version 12.2(13)ZH, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1) System image file is "flash:c1700-k9o3sy7-mz.122-13.ZH.bin" This is the config: crypto isakmp policy 1 encr 3des hash md5 authentication pre-share group 2 lifetime 3600 crypto isakmp key 0 ********** address 16.x.x.x ! ! crypto ipsec transform-set MD5-3DES esp-3des esp-md5-hmac crypto ipsec df-bit clear ! crypto map Uni 1 ipsec-isakmp set peer 16.5.10.2 set transform-set MD5-3DES match address 102 ! interface ATM0 no ip address no ip redirects no ip unreachables no ip proxy-arp ip route-cache flow no atm ilmi-keepalive dsl operating-mode auto ! interface ATM0.1 point-to-point ip address x.x.x.x 255.255.255.0 no ip unreachables no ip proxy-arp ip nat outside pvc 8/32 encapsulation aal5snap ! crypto map Uni ! interface FastEthernet0 ip address 192.168.11.1 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip route-cache flow speed auto ip nat inside source route-map SDM_RMAP_1 interface ATM0.1 overload ip classless ip route 0.0.0.0 0.0.0.0 ATM0.1 access-list 101 remark Entrada red local access-list 101 permit ip 192.168.11.0 0.0.0.255 any access-list 102 permit ip 192.168.11.0 0.0.0.255 192.168.10.0 0.0.0.255 log access-list 103 deny ip 192.168.11.0 0.0.0.255 192.168.10.0 0.0.0.255 log access-list 103 permit ip 192.168.11.0 0.0.0.255 any ! route-map SDM_RMAP_1 permit 1 match ip address 103 ! The client has the IP 192.168.11.70 and it tries to go by the crypto map, but it shouldn't do it. Can anybody help me? ... View more

Hi, I have a Catalyst 4503 with 2 POWER SUPPLY Catalyst 4500 1000W AC Power Supply(Spare)(Data Only). When I power off a power supply and then I power on it, the switch resets itself. I have tried with the power supplies in differents UPS's but is the same. By default, in the configuration appears this command:power dc input 2500 Maybe, can it affect? Can anybody help me please? Many thanks in advance ... View more

Hi, I want to configure a 1700 router to connect to Internet by DSL and ISDN backup. I need that the dialer1 and the atm0.1 have the same IP because we have a web server in our LAN. I have configured the router but it doesn't work, when I shutdown the atm interface the dialer interface is : sh interfaces dialer 1 Dialer1 is standby mode/disabled, line protocol is down Hardware is Unknown Interface is unnumbered. Using address of Loopback0 (212.81.207.2) MTU 1500 bytes, BW 56 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation PPP, loopback not set DTR is pulsed for 1 seconds on reset Last input never, output never, output hang never Last clearing of "show interface" counters 00:53:54 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes 0 packets output, 0 bytes This is the show run of the router Can anybody help me please? ... View more

Hi, I have a router 3745 with IOS c3745-ik9o3s-mz.123-5c in a flash of 128 Mb. The router has a module with 8 serial and when I configure any serial port and I plug the serial cable, suddenly the console doesn't work and of course the serial port either. Can anybody help me, please? ... View more

Hi I have a Catalyst 6500 with version 7.3(2) I have configured 802.1x but it doesn't work and I don't know why. The Radius server is Microsoft IAS and it is working with other switches fron 3Com, Alcatel and Avaya. Can anybody help me please? This is the config And there are two show commands Console> (enable) sh authentication Login Authentication: Console Session Telnet Session Http Session --------------------- ---------------- ---------------- ---------------- tacacs disabled disabled disabled radius enabled(primary) enabled(primary) enabled(primary) kerberos disabled disabled disabled local enabled enabled enabled attempt limit 3 3 - lockout timeout (sec) disabled disabled - Enable Authentication: Console Session Telnet Session Http Session ---------------------- ----------------- ---------------- ---------------- tacacs disabled disabled disabled radius disabled disabled disabled kerberos disabled disabled disabled local enabled(primary) enabled(primary) enabled(primary) attempt limit 3 3 - lockout timeout (sec) disabled disabled - Console> (enable) Console> (enable) sh dot1x PAE Capability Authenticator Only Protocol Version 1 system-auth-control enabled max-req 2 quiet-period 60 seconds re-authperiod 3600 seconds server-timeout 30 seconds supp-timeout 30 seconds tx-period 30 seconds ... View more

Hi, I must set up this pix to replace another that is broken down. It worked like a failover, and I would like to know if this pix has the right license to do it. Many thanks inadvance pix# sh ver Cisco PIX Firewall Version 6.2(2) Cisco PIX Device Manager Version 2.1(1) Compiled on Fri 07-Jun-02 17:49 by morlee pix up 40 secs Hardware: PIX-515E, 64 MB RAM, CPU Pentium II 433 MHz Flash E28F128J3 @ 0x300, 16MB BIOS Flash AM29F400B @ 0xfffd8000, 32KB Encryption hardware device : IRE2141 with 2048KB, HW:1.0, CGXROM:1.9, FW:6.5 0: ethernet0: address is 000b.fd81.e8ef, irq 10 1: ethernet1: address is 000b.fd81.e8f0, irq 11 2: ethernet2: address is 00e0.b606.81cf, irq 11 3: ethernet3: address is 00e0.b606.81ce, irq 10 4: ethernet4: address is 00e0.b606.81cd, irq 9 5: ethernet5: address is 00e0.b606.81cc, irq 5 Licensed Features: Failover: Enabled VPN-DES: Enabled VPN-3DES: Disabled Maximum Interfaces: 6 Cut-through Proxy: Enabled Guards: Enabled URL-filtering: Enabled Inside Hosts: Unlimited Throughput: Unlimited IKE peers: Unlimited Serial Number: 807044799 (0x301a86bf) Running Activation Key: 0x532907f3 0xd26ba632 0xf3a8ade0 0xa70b67da Configuration last modified by enable_15 at 07:22:13.690 UTC Fri Mar 26 2004 ... View more

Hi, I have a catalyst 6506 and I can’t connect to it by console. The catalyst has a WS-X6K-SUP1A-2GE that has the following leds: Status in orange System in green Active without light Pwr mgmt in red Sometimes it boots with all lights in green, but I also can’t connect to it. What can I do? Thanks ... View more

Hi I have two problems with a installation that has many switches. I have a C2948G-L3 to do the routing, a C4912G where came many C3524XL. I have put 3 vlan's in the C4912G that are propagated by 802.1Q to the switches C3524XL. The C2948G-L3 is attached to the C4912G too and has three subinterfaces with 802.1Q, each one for a different vlan. The users in the vlan 1 in the C2948G-L3 have a very low conection with others vlan 1 users in others switches. But they conect fast with vlan 2 or 3 users in others switches. What can I do? cpd_2948G-L3#sh run Building configuration... Current configuration: ! version 12.0 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname 2948G-L3 ! boot system flash cat2948g-in-mz.120-25.W5.27 ! ip subnet-zero bridge irb ! ! ! interface FastEthernet1 no ip address no ip directed-broadcast bridge-group 1 ! interface FastEthernet2 no ip address no ip directed-broadcast bridge-group 1 ! interface FastEthernet47 no ip address no ip directed-broadcast bridge-group 1 ! interface FastEthernet48 no ip address no ip directed-broadcast bridge-group 1 ! interface GigabitEthernet49 no ip address no ip directed-broadcast ! interface GigabitEthernet49.1 encapsulation dot1Q 1 native no ip directed-broadcast bridge-group 1 ! interface GigabitEthernet49.2 encapsulation dot1Q 2 no ip directed-broadcast bridge-group 2 ! interface GigabitEthernet49.3 encapsulation dot1Q 3 no ip directed-broadcast bridge-group 3 ! interface GigabitEthernet50 no ip address no ip directed-broadcast ! interface BVI1 ip address 192.168.60.182 255.255.255.0 no ip directed-broadcast no ip route-cache cef ! interface BVI2 ip address 192.168.151.254 255.255.255.0 no ip directed-broadcast no ip route-cache cef ! interface BVI3 ip address 192.168.152.254 255.255.255.0 no ip directed-broadcast no ip route-cache cef ! ip classless ip route 0.0.0.0 0.0.0.0 192.168.60.3 ! bridge 1 protocol ieee bridge 1 route ip bridge 2 protocol ieee bridge 2 route ip bridge 3 protocol ieee bridge 3 route ip ! line con 0 transport input none line aux 0 xxxxx password xxx login ! end And the C4912G is: cpd_4912G> (enable) begin ! #version 4.5(3) ! ! ! set interface sc0 up set interface sl0 0.0.0.0 0.0.0.0 #vtp set vtp domain sabadell set vtp mode server set vtp v2 enable set vtp pruning disable set vtp pruneeligible 2-1000 clear vtp pruneeligible 1001-1005 set vlan 1 name default type ethernet mtu 1500 said 100001 state active set vlan 2 name red_151 type ethernet mtu 1500 said 100002 state active set vlan 3 name red_152 type ethernet mtu 1500 said 100003 state active set vlan 1005 name trbrf-default type trbrf mtu 4472 said 101005 state active bridge 0xf stp ibm set vlan 1003 name trcrf-default type trcrf mtu 4472 said 101003 state active parent 1005 ring 0xccc mode srb aremaxhop 7 stemaxhop 7 ! #vlan 1 set spantree enable 1 set spantree fwddelay 15 1 set spantree hello 2 1 set spantree maxage 20 1 set spantree priority 32768 1 #vlan 2 set spantree enable 2 set spantree fwddelay 15 2 set spantree hello 2 2 set spantree maxage 20 2 set spantree priority 32768 2 #vlan 3 set spantree enable 3 set spantree fwddelay 15 3 set spantree hello 2 3 set spantree maxage 20 3 set spantree priority 32768 3 ! #set boot command set boot config-register 0x2 set boot system flash bootflash: #module 1 : 0-port Switching Supervisor set module name 1 ! #module 2 : 12-port 1000BaseX Ethernet set module name 2 set module enable 2 set vlan 1 2/1-12 set port channel 2/1-4 off set port channel 2/5-8 off set port channel 2/9-12 off set port channel 2/1-2 on set port channel 2/3-4 auto set port channel 2/5-8 auto set port channel 2/9-12 auto set port enable 2/1-12 set port level 2/1-12 normal set port duplex 2/1-12 full set port trap 2/1-12 disable set port name 2/1-12 set port security 2/1-12 disable set port membership 2/1-12 static set port protocol 2/1-12 ip on set port protocol 2/1-12 ipx auto set port negotiation 2/1-12 enable set port flowcontrol send 2/1-12 desired set port flowcontrol receive 2/1-12 off set cdp enable 2/1-12 set cdp interval 2/1-12 60 set trunk 2/1 on dot1q 1-1005 set trunk 2/2 on dot1q 1-1005 set trunk 2/3 on dot1q 1-1005 set trunk 2/4 on dot1q 1-1005 set trunk 2/5 on dot1q 1-1005 set trunk 2/6 on dot1q 1-1005 set trunk 2/7 auto dot1q 1-1005 set trunk 2/8 on dot1q 1-1005 set trunk 2/9 on dot1q 1-1005 set trunk 2/10 on dot1q 1-1005 set trunk 2/11 auto dot1q 1-1005 set trunk 2/12 on dot1q 1-1005 end ... View more

Hi I have a router 837 that have to be a Easy VPN server for software clients and too do a VPN with other router, but I see that only works the VPN with the other router. This is the configuration of the router: barcelona#sh run Building configuration... Current configuration : 3106 bytes ! version 12.2 no service pad hostname barcelona ! boot system flash c837-k9o3y6-mz.123-2.T1.bin logging queue-limit 100 ! aaa new-model ! ! aaa authentication login vpnusers local aaa authorization network barcelona local aaa session-id common ip subnet-zero ip domain name barcelona.es ip host girona x.x.10.16 ! ! ip audit notify log ip audit po max-events 100 no ftp-server write-enable ! crypto isakmp policy 10 encr 3des hash md5 authentication pre-share group 2 ! crypto isakmp policy 20 hash md5 authentication pre-share group 2 crypto isakmp key 0 aba address x.x.10.16 no-xauth crypto isakmp identity hostname crypto isakmp client configuration address-pool local mipool crypto isakmp xauth timeout 60 ! crypto isakmp client configuration group barcelona domain barcelona.es pool mipool acl 150 ! ! crypto ipsec transform-set mitrans esp-3des esp-md5-hmac ! crypto dynamic-map mapadinamico 10 set transform-set mitrans reverse-route ! ! crypto map mimapa client authentication list vpnusers crypto map mimapa isakmp authorization list barcelona crypto map mimapa client configuration address respond crypto map mimapa 20 ipsec-isakmp set peer x.x.10.16 set transform-set mitrans match address 102 crypto map mimapa 30 ipsec-isakmp dynamic mapadinamico ! interface Ethernet0 ip address 192.168.201.246 255.255.255.0 ip nat inside hold-queue 100 out ! interface ATM0 no ip address no atm ilmi-keepalive dsl operating-mode auto ! interface ATM0.1 point-to-point ip address x.x.x.22 255.255.255.192 ip nat outside pvc 8/32 encapsulation aal5snap ! crypto map mimapa ! ip local pool mipool 192.168.201.100 192.168.201.105 ip nat inside source route-map nonat interface ATM0.1 overload ip classless ip route 0.0.0.0 0.0.0.0 ATM0.1 ip route 192.168.200.0 255.255.255.0 23.98.10.16 ip http server no ip http secure-server ! access-list 102 permit ip 192.168.201.0 0.0.0.255 192.168.200.0 0.0.0.255 access-list 110 deny ip 192.168.201.0 0.0.0.255 192.168.200.0 0.0.0.255 access-list 110 permit ip 192.168.201.0 0.0.0.255 any access-list 150 permit ip 192.168.201.0 0.0.0.255 any route-map nonat permit 10 match ip address 110 ! radius-server authorization permit missing Service-Type ! scheduler max-task-time 5000 ! end Can anybody help me please? ... View more

I have 3 routers 837, each one of them with a VPN to the others. I have authentication pre-share and crypto isakmp identity hostname (because I need VPN clients). When I put debug crypto isakmp I got the next: *Mar 1 00:14:16.231: ISAKMP: received ke message (1/1) *Mar 1 00:14:16.231: ISAKMP (0:0): SA request profile is (NULL) *Mar 1 00:14:16.231: ISAKMP: Created a peer struct for 23.96.48.22, peer port 500 *Mar 1 00:14:16.231: ISAKMP: Locking peer struct 0x8179BE5C, IKE refcount 1 for crypto_ikmp_config_initialize_sa *Mar 1 00:14:16.231: ISAKMP (0:0): Setting client config settings 8156AEE0 *Mar 1 00:14:16.231: ISAKMP (0:0): (Re)Setting client xauth list and state *Mar 1 00:14:16.231: ISAKMP: local port 500, remote port 500 *Mar 1 00:14:16.235: ISAKMP: set new node 0 to CONF_XAUTH *Mar 1 00:14:16.235: ISAKMP: insert sa successfully sa = 8156B30C *Mar 1 00:14:16.235: ISAKMP (0:1): Can not start Aggressive mode, trying Main m ode. *Mar 1 00:14:16.235: ISAKMP: Looking for a matching key for 23.96.48.22 in de fault *Mar 1 00:14:16.235: ISAKMP (0:1): No pre-shared key with 23.96.48.22! *Mar 1 00:14:16.235: ISAKMP (0:1): No Cert or pre-shared address key. *Mar 1 00:14:16.235: ISAKMP (0:1): construct_initial_message: Can not start Mai n mode *Mar 1 00:14:16.235: ISAKMP (0:1): purging SA., sa=8156B30C, delme=8156B30C *Mar 1 00:14:16.235: ISAKMP (0:1): purging node -1284547857 *Mar 1 00:14:16.239: ISAKMP: Unlocking IKE struct 0x8179BE5C for declare_sa_dea d(), count 0 Both routers have this configuration: crypto isakmp policy 10 encr 3des hash md5 authentication pre-share group 2 I see this with sh crypto isakmp key acabats#sh crypto isakmp key Keyring Hostname/Address Preshared Key default girona acabats barcelona acalona and the other barcelona#sh crypto isakmp key Hostname/Address Preshared Key default acabats acalona : girona barcelona But I don't know the meaning of the default. Can anybody help me, please? ... View more

I want to change the IOS in a router 837. I have loaded the new IOS in the router without delete the oldest one. I have this in the flash: System flash directory: File Length Name/status 1 6039108 c837-k9o3sy6-mz.122-13.ZH.bin (old) 2 6226044 c837-k9o3y6-mz.123-2.T1.bin (new) [12265280 bytes used, 55488 available, 12320768 total] 12288K bytes of processor board System flash (Read/Write) I put boot system flash c837-k9o3y6-mz.123-2.T1.bin (this is the new IOS) and when I reload the router it tell me the next: %SYS-3-IMAGE_TOO_BIG: 'flash:c837-k9o3y6-mz.123-2.T1.bin' is too large for available memory (5874860 bytes).boot of "c837-k9o3y6-mz.123-2.T1.bin" using boot helper "flash:c837-k9o3sy6-mz.122-13.ZH.b in" failed error returned: File read failed -- Not enough space loadprog: error - on file open boot: cannot load "c837-k9o3y6-mz.123-2.T1.bin"ú System Bootstrap, Version 12.2(8r)YN, RELEASE SOFTWARE (fc1) TAC Support: http://www.cisco.com/tac Copyright (c) 2002 by cisco Systems, Inc. C800/SOHO series (Board ID: 23-127) platform with 32768 Kbytes of main memory What can I do? If I delete the oldest IOS, the router will boot well? Please I need your help!!!!! Many thanks in advance ... View more

Hi, I have a problem with this client. I can't connect with a router 837 with this IOS c837-k9o3sy6-mz.122-13.ZH.bin. The configuration of the router is: Router_Adsl#sh run version 12.2 no service pad hostname Router_Adsl ! username xxxx password 0 xxxx aaa new-model ! ! aaa authorization network administradores local aaa session-id common ip subnet-zero ip domain name racing.es ! crypto isakmp policy 18 hash md5 authentication pre-share group 2 ! crypto isakmp client configuration address-pool local mipool ! crypto isakmp client configuration group administradores key 0 xxxx dns 192.168.200.2 domain racing.es pool mipool ! ! crypto ipsec transform-set mitrans esp-3des esp-sha-hmac crypto ipsec transform-set lasegtrans esp-des esp-md5-hmac ! crypto dynamic-map mapadinamico 20 set transform-set mitrans reverse-route ! crypto dynamic-map elsegmapa 30 set transform-set lasegtrans ! ! crypto map mapaestatico isakmp authorization list administradores crypto map mapaestatico client configuration address respond crypto map mapaestatico 10 ipsec-isakmp dynamic mapadinamico crypto map mapaestatico 20 ipsec-isakmp dynamic elsegmapa ! ! interface Loopback0 ip address x.x.x.2 255.255.255.255 ! interface Ethernet0 ip address 192.168.200.251 255.255.255.0 ip nat inside no ip route-cache no ip mroute-cache hold-queue 100 out ! interface ATM0 no ip address no ip route-cache no ip mroute-cache no atm ilmi-keepalive bundle-enable dsl operating-mode auto hold-queue 224 in ! interface ATM0.1 point-to-point ip address xx.x.9 255.255.255.252 ip access-group 100 in ip nat outside no ip route-cache no ip mroute-cache pvc 1/32 protocol ip 10.0.80.10 broadcast vbr-nrt 384 384 32 encapsulation aal5mux ip ! crypto map mapaestatico ! ip local pool mipool 192.168.200.218 192.168.200.220 ip nat inside source list 1 interface Loopback0 overload ip classless ip route 0.0.0.0 0.0.0.0 10.0.80.10 ip access-list extended default-domain ip access-list extended key-exchange ip access-list extended protocol ip access-list extended save-password access-list 1 permit 192.168.200.0 0.0.0.255 radius-server authorization permit missing Service-Type ! scheduler max-task-time 5000 ! end When I put debug crypto ipsec I get: *Mar 1 01:51:55.215: IPSEC(key_engine): got a queue event... *Mar 1 01:51:55.727: IPSEC(validate_proposal_request): proposal part #1, (key eng. msg.) INBOUND local= 22.81.27.2, remote= 62.83.244.84, local_proxy= 22.81.27.2/255.255.255.255/0/0 (type=1), remote_proxy= 192.168.200.219/255.255.255.255/0/0 (type=1), protocol= ESP, transform= esp-aes 256 esp-md5-hmac , lifedur= 0s and 0kb, spi= 0x0(0), conn_id= 0, keysize= 256, flags= 0x2 *Mar 1 01:51:55.727: IPSEC(validate_proposal_request): proposal part #2, (key eng. msg.) INBOUND local= 22.81.27.2, remote= 62.83.244.84, local_proxy= 22.81.27.2/255.255.255.255/0/0 (type=1), remote_proxy= 192.168.200.219/255.255.255.255/0/0 (type=1), protocol= PCP, transform= comp-lzs , lifedur= 0s and 0kb, spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x2 *Mar 1 01:51:55.731: IPSEC(validate_transform_proposal): invalid local address 22.81.27.2 *Mar 1 01:51:55.731: IPSEC(validate_proposal_request): proposal part #1, (key eng. msg.) INBOUND local= 22.81.27.2, remote= 62.83.244.84, local_proxy= 22.81.27.2/255.255.255.255/0/0 (type=1), remote_proxy= 192.168.200.219/255.255.255.255/0/0 (type=1), protocol= ESP, transform= esp-aes 256 esp-sha-hmac , lifedur= 0s and 0kb, spi= 0x0(0), conn_id= 0, keysize= 256, flags= 0x2 *Mar 1 01:51:55.735: IPSEC(validate_proposal_request): proposal part #2, (key eng. msg.) INBOUND local= 22.81.27.2, remote= 62.83.244.84, local_proxy= 22.81.27.2/255.255.255.255/0/0 (type=1), remote_proxy= 192.168.200.219/255.255.255.255/0/0 (type=1), protocol= PCP, transform= comp-lzs , lifedur= 0s and 0kb, spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x2 *Mar 1 01:51:55.735: IPSEC(validate_transform_proposal): invalid local address 22.81.27.2 *Mar 1 01:51:55.739: IPSEC(validate_proposal_request): proposal part #1, (key eng. msg.) INBOUND local= 212.81.207.2, remote= 62.83.244.84, local_proxy= 22.81.27.2/255.255.255.255/0/0 (type=1), remote_proxy= 192.168.200.219/255.255.255.255/0/0 (type=1), protocol= ESP, transform= esp-aes esp-md5-hmac , lifedur= 0s and 0kb, spi= 0x0(0), conn_id= 0, keysize= 128, flags= 0x2 *Mar 1 01:51:55.739: IPSEC(validate_proposal_request): proposal part #2, (key eng. msg.) INBOUND local= 22.81.27.2, remote= 62.83.244.84, local_proxy= 22.81.27.2/255.255.255.255/0/0 (type=1), remote_proxy= 192.168.200.219/255.255.255.255/0/0 (type=1), protocol= PCP, transform= comp-lzs , lifedur= 0s and 0kb, spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x2 *Mar 1 01:51:55.743: IPSEC(validate_transform_proposal): invalid local address 22.81.27.2 *Mar 1 01:51:55.743: IPSEC(validate_proposal_request): proposal part #1, (key eng. msg.) INBOUND local= 22.81.27.2, remote= 62.83.244.84, local_proxy= 22.81.27.2/255.255.255.255/0/0 (type=1), remote_proxy= 192.168.200.219/255.255.255.255/0/0 (type=1), protocol= ESP, transform= esp-aes esp-sha-hmac , lifedur= 0s and 0kb, spi= 0x0(0), conn_id= 0, keysize= 128, flags= 0x2 *Mar 1 01:51:55.743: IPSEC(validate_proposal_request): proposal part #2, (key eng. msg.) INBOUND local= 22.81.27.2, remote= 62.83.244.84, local_proxy= 22.81.27.2/255.255.255.255/0/0 (type=1), remote_proxy= 192.168.200.219/255.255.255.255/0/0 (type=1), protocol= PCP, transform= comp-lzs , lifedur= 0s and 0kb, spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x2 *Mar 1 01:51:55.743: IPSEC(validate_transform_proposal): invalid local address 22.81.27.2 *Mar 1 01:51:55.747: IPSEC(validate_proposal_request): proposal part #1, (key eng. msg.) INBOUND local= 212.81.207.2, remote= 62.83.244.84, local_proxy= 22.81.27.2/255.255.255.255/0/0 (type=1), remote_proxy= 192.168.200.219/255.255.255.255/0/0 (type=1), protocol= ESP, transform= esp-aes 256 esp-md5-hmac , lifedur= 0s and 0kb, spi= 0x0(0), conn_id= 0, keysize= 256, flags= 0x2 *Mar 1 01:51:55.747: IPSEC(validate_transform_proposal): invalid local address 22.81.27.2 *Mar 1 01:51:55.751: IPSEC(validate_proposal_request): proposal part #1, (key eng. msg.) INBOUND local= 22.81.27.2, remote= 62.83.244.84, local_proxy= 22.81.27.2/255.255.255.255/0/0 (type=1), remote_proxy= 192.168.200.219/255.255.255.255/0/0 (type=1), protocol= ESP, transform= esp-aes 256 esp-sha-hmac , lifedur= 0s and 0kb, spi= 0x0(0), conn_id= 0, keysize= 256, flags= 0x2 *Mar 1 01:51:55.751: IPSEC(validate_transform_proposal): invalid local address 22.81.27.2 *Mar 1 01:51:55.751: IPSEC(validate_proposal_request): proposal part #1, (key eng. msg.) INBOUND local= 212.81.207.2, remote= 62.83.244.84, local_proxy= 22.81.27.2/255.255.255.255/0/0 (type=1), remote_proxy= 192.168.200.219/255.255.255.255/0/0 (type=1), protocol= ESP, transform= esp-aes esp-md5-hmac , lifedur= 0s and 0kb, spi= 0x0(0), conn_id= 0, keysize= 128, flags= 0x2 *Mar 1 01:51:55.755: IPSEC(validate_transform_proposal): invalid local address 22.81.27.2 The log viewer of the client tell me: The lenght of the mode Config option is invalid Received malformed message or negotiation no longer active Can can I do? I need your help please. Many thanks ... View more