This is an existing Cisco VPN client to 2611 VPN connection, some of my client upgrade their client software from 3.5.2 to 3.6.4/4.0.1, and they are unable to negoticate a tunnel with the 2611, and the follow log is what i got from the router
04:51:04: ISAKMP (0:2): Checking ISAKMP transform 7 against priority 3 policy
04:51:04: ISAKMP: encryption... What? 7?
04:51:04: ISAKMP: hash SHA
04:51:04: ISAKMP: default group 2
04:51:04: ISAKMP: auth pre-share
04:51:04: ISAKMP: life type in seconds
04:51:04: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
04:51:04: ISAKMP: attribute 14
04:51:04: ISAKMP (0:2): Encryption algorithm offered does not match policy!
04:51:04: ISAKMP (0:2): atts are not acceptable. Next payload is 3
04:51:04: ISAKMP (0:2): Checking ISAKMP transform 8 against priority 3 policy
04:51:04: ISAKMP: encryption... What? 7?
04:51:04: ISAKMP: hash MD5
04:51:04: ISAKMP: default group 2
04:51:04: ISAKMP: auth pre-share
04:51:04: ISAKMP: life type in seconds
04:51:04: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
04:51:04: ISAKMP: attribute 14
04:51:04: ISAKMP (0:2): Encryption algorithm offered does not match policy!
04:51:04: ISAKMP (0:2): atts are not acceptable. Next payload is 3
04:51:04: ISAKMP (0:2): Checking ISAKMP transform 9 against priority 3 policy
04:51:04: ISAKMP: encryption 3DES-CBC
04:51:04: ISAKMP: hash SHA
04:51:04: ISAKMP: default group 2
04:51:04: ISAKMP: auth XAUTHInitPreShared
04:51:04: ISAKMP: life type in seconds
04:51:04: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
04:51:04: ISAKMP (0:2): Encryption algorithm offered does not match policy!
04:51:04: ISAKMP (0:2): atts are not acceptable. Next payload is 3
04:51:04: ISAKMP (0:2): Checking ISAKMP transform 10 against priority 3 policy
04:51:04: ISAKMP: encryption 3DES-CBC
04:51:04: ISAKMP: hash MD5
04:51:04: ISAKMP: default group 2
04:51:04: ISAKMP: auth XAUTHInitPreShared
04:51:04: ISAKMP: life type in seconds
04:51:04: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
04:51:04: ISAKMP (0:2): Encryption algorithm offered does not match policy!
04:51:04: ISAKMP (0:2): atts are not acceptable. Next payload is 3
I have try to modify the router SA to match with the one above, but still not matching with it. any suggestion would be appreciate!
Simon
