cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
1829
Views
0
Helpful
1
Replies
Behzad Sharifi
Beginner

ipsec policy invalidated proposal with error 256

Hello

I have a IPsec lan-to-lan tunnel between a Cisco ASA and Cisco ASR1001.

I can see that the Phase 1 is OK:

SDN3-HUB-1#sh crypto isakmp sa
IPv4 Crypto ISAKMP SA
dst src state conn-id status
1XX.XX.XXX.XXX 9X.XXX.XXX.XX QM_IDLE 1118 ACTIVE

IPv6 Crypto ISAKMP SA

SDN3-HUB-1#

But I have problem with Phase 2 and I am getting this massege from my debug output on ASR1001 Router:

May 24 2017 10:51:35.019: ISAKMP-ERROR: (1117):IPSec policy invalidated proposal with error 256

 

I have checked all my Phase 2 config on the ASA and the Router and seems to be right. 
I need to know what does the IPSec policy invalidated proposal with error 256
 .

Best regards

1 REPLY 1
Mohammed al Baqari
VIP Advisor

Hi,

Please share the output of debug cry isa. 

Content for Community-Ad