cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
392
Views
0
Helpful
1
Replies

3005 IKE proposals

kitprice1
Level 1
Level 1

Hello to all,

my 3005 concentrator has many IKE proposals opted, but the 3002 client is not matching up on any. Here is a sample of the 3005 concentrator event log -

9375 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52540

Proposal # 1, Transform # 17, Type ISAKMP, Id IKE

Parsing received transform:

Phase 1 failure against global IKE proposal # 1:

Rcv'd Key Length attr class, but class is not cfg'd

9379 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52541

Phase 1 failure against global IKE proposal # 2:

Rcv'd Key Length attr class, but class is not cfg'd

9381 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52542

Phase 1 failure against global IKE proposal # 3:

Rcv'd Key Length attr class, but class is not cfg'd

9383 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52543

Phase 1 failure against global IKE proposal # 4:

Rcv'd Key Length attr class, but class is not cfg'd

9385 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52544

Phase 1 failure against global IKE proposal # 5:

Mismatched attr types for class Key Length:

Rcv'd: 256 Bits

Cfg'd: 128 Bits

9388 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52545

Phase 1 failure against global IKE proposal # 6:

Mismatched attr types for class Key Length:

Rcv'd: 256 Bits

Cfg'd: 128 Bits

9391 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52546

Phase 1 failure against global IKE proposal # 7:

Mismatched attr types for class Key Length:

Rcv'd: 256 Bits

Cfg'd: 192 Bits

9394 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52547

Phase 1 failure against global IKE proposal # 8:

Mismatched attr types for class Key Length:

Rcv'd: 256 Bits

Cfg'd: 192 Bits

9397 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52548

Phase 1 failure against global IKE proposal # 9:

Mismatched attr types for class Hash Alg:

Rcv'd: SHA

Cfg'd: MD5

9399 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52549

Phase 1 failure against global IKE proposal # 10:

Mismatched attr types for class Auth Method:

Rcv'd: Preshared Key

Cfg'd: XAUTH with Preshared Key (Initiator authenticated)

9403 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52550

Phase 1 failure against global IKE proposal # 11:

Rcv'd Key Length attr class, but class is not cfg'd

9405 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52551

Phase 1 failure against global IKE proposal # 12:

Rcv'd Key Length attr class, but class is not cfg'd

9407 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52552

Phase 1 failure against global IKE proposal # 13:

Rcv'd Key Length attr class, but class is not cfg'd

9409 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52553

Phase 1 failure against global IKE proposal # 14:

Rcv'd Key Length attr class, but class is not cfg'd

9411 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52554

Phase 1 failure against global IKE proposal # 15:

Mismatched attr types for class Key Length:

Rcv'd: 256 Bits

Cfg'd: 128 Bits

Thanx for any help!

1 Reply 1

jsivulka
Level 5
Level 5

The VPN 3000 Concentrator might not decrement the Simultaneous IKE counter correctly while under a very heavy load of incoming IKE sessions. Can you please send error message and also client configuration. Without this information it is very difficult to find accurate solution?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: