Error message during IKE Phase 2

[msrohman]

I'm using a PDA with L2TP/IPSec to connect to a VPN 3005 Concentrator. Could anyone point us in the right direction regarding this error message?

//--------------------------------------

8405 09/14/2004 12:26:41.390 SEV=4 IKE/1 RPT=1 67.84.147.228 Group [VPNC_Base_Group] Failed IKE phase 2 source proxy selector negotiation for L2TP/IPSec

Expected Selectors: Type 1, Proto 17, Port 1701, Addr 67.84.147.228

Received Selectors: Type 1, Proto 17, Port 1701, Addr 192.168.1.106

//-------------------------------------------------

Is the VPN client sending the wrong information?

Thanks,

Mike

[mostiguy]

That is the server log, right? It looks like the client is NATed and the concentrator does not like it. Do you have any other NATed clients using L2tp to connect to the concentrator?

[msrohman]

Yes, that is the VPN concentrator log.

This is the only client running L2TP.

I agree with you. It appears that the client is sending IKE parameters that the concentrator is not "expecting". I think this client is behind a Linksys wireless router. This is the NATing device

[mmihalyfi]

Hello msrohman,

I have the same, what was the solution in your case?

Thanks,

Marin