VPN Phase 2 Failing

[drikilbride]

Hi

I am trying to set up a new VPN connection between Site A and Site B.

It passes phase one but throws up an error at phase two. I will attach the error message.

Site A's firewall currently has another VPN on it working away fine so I suspect the problem lies on Site B's config.

Thanks in advance

[Jennifer Halim · Accepted solution]

PFS is not matching.

Site A: you have "crypto map outside_map 2 set pfs group1"

Site B: you have "crypto map outside_map 4 set pfs" ---> which default to pfs group 2

Change either one to match each other.

Hope that resolves the issue.

[drikilbride]

Ah was that all?? That got it working...thanks a mil!