09-26-2007 05:31 PM
Hello to all,
my 3005 concentrator has many IKE proposals opted, but the 3002 client is not matching up on any. Here is a sample of the 3005 concentrator event log -
9375 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52540
Proposal # 1, Transform # 17, Type ISAKMP, Id IKE
Parsing received transform:
Phase 1 failure against global IKE proposal # 1:
Rcv'd Key Length attr class, but class is not cfg'd
9379 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52541
Phase 1 failure against global IKE proposal # 2:
Rcv'd Key Length attr class, but class is not cfg'd
9381 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52542
Phase 1 failure against global IKE proposal # 3:
Rcv'd Key Length attr class, but class is not cfg'd
9383 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52543
Phase 1 failure against global IKE proposal # 4:
Rcv'd Key Length attr class, but class is not cfg'd
9385 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52544
Phase 1 failure against global IKE proposal # 5:
Mismatched attr types for class Key Length:
Rcv'd: 256 Bits
Cfg'd: 128 Bits
9388 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52545
Phase 1 failure against global IKE proposal # 6:
Mismatched attr types for class Key Length:
Rcv'd: 256 Bits
Cfg'd: 128 Bits
9391 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52546
Phase 1 failure against global IKE proposal # 7:
Mismatched attr types for class Key Length:
Rcv'd: 256 Bits
Cfg'd: 192 Bits
9394 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52547
Phase 1 failure against global IKE proposal # 8:
Mismatched attr types for class Key Length:
Rcv'd: 256 Bits
Cfg'd: 192 Bits
9397 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52548
Phase 1 failure against global IKE proposal # 9:
Mismatched attr types for class Hash Alg:
Rcv'd: SHA
Cfg'd: MD5
9399 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52549
Phase 1 failure against global IKE proposal # 10:
Mismatched attr types for class Auth Method:
Rcv'd: Preshared Key
Cfg'd: XAUTH with Preshared Key (Initiator authenticated)
9403 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52550
Phase 1 failure against global IKE proposal # 11:
Rcv'd Key Length attr class, but class is not cfg'd
9405 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52551
Phase 1 failure against global IKE proposal # 12:
Rcv'd Key Length attr class, but class is not cfg'd
9407 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52552
Phase 1 failure against global IKE proposal # 13:
Rcv'd Key Length attr class, but class is not cfg'd
9409 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52553
Phase 1 failure against global IKE proposal # 14:
Rcv'd Key Length attr class, but class is not cfg'd
9411 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52554
Phase 1 failure against global IKE proposal # 15:
Mismatched attr types for class Key Length:
Rcv'd: 256 Bits
Cfg'd: 128 Bits
Thanx for any help!
10-03-2007 01:48 PM
The VPN 3000 Concentrator might not decrement the Simultaneous IKE counter correctly while under a very heavy load of incoming IKE sessions. Can you please send error message and also client configuration. Without this information it is very difficult to find accurate solution?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide