*Oct 17 11:06:22.247: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.247: ISAKMP:      keylength of 128
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 9 against priority 10 policy
*Oct 17 11:06:22.247: ISAKMP:      encryption 3DES-CBC
*Oct 17 11:06:22.247: ISAKMP:      hash SHA
*Oct 17 11:06:22.247: ISAKMP:      default group 2
*Oct 17 11:06:22.247: ISAKMP:      auth XAUTHInitPreShared
*Oct 17 11:06:22.247: ISAKMP:      life type in seconds
*Oct 17 11:06:22.247: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 10 against priority 10 policy
*Oct 17 11:06:22.247: ISAKMP:      encryption 3DES-CBC
*Oct 17 11:06:22.247: ISAKMP:      hash MD5
*Oct 17 11:06:22.247: ISAKMP:      default group 2
*Oct 17 11:06:22.247: ISAKMP:      auth XAUTHInitPreShared
*Oct 17 11:06:22.247: ISAKMP:      life type in seconds
*Oct 17 11:06:22.247: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 11 against priority 10 policy
*Oct 17 11:06:22.247: ISAKMP:      encryption 3DES-CBC
*Oct 17 11:06:22.247: ISAKMP:      hash SHA
*Oct 17 11:06:22.247: ISAKMP:      default group 2
*Oct 17 11:06:22.247: ISAKMP:      auth pre-share
*Oct 17 11:06:22.247: ISAKMP:      life type in seconds
*Oct 17 11:06:22.247: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 12 against priority 10 policy
*Oct 17 11:06:22.247: ISAKMP:      encryption 3DES-CBC
*Oct 17 11:06:22.247: ISAKMP:      hash MD5
*Oct 17 11:06:22.247: ISAKMP:      default group 2
*Oct 17 11:06:22.247: ISAKMP:      auth pre-share
*Oct 17 11:06:22.247: ISAKMP:      life type in seconds
*Oct 17 11:06:22.247: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 13 against priority 10 policy
*Oct 17 11:06:22.247: ISAKMP:      encryption DES-CBC
*Oct 17 11:06:22.247: ISAKMP:      hash MD5
*Oct 17 11:06:22.247: ISAKMP:      default group 2
*Oct 17 11:06:22.247: ISAKMP:      auth XAUTHInitPreShared
*Oct 17 11:06:22.247: ISAKMP:      life type in seconds
*Oct 17 11:06:22.247: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.247: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 14 against priority 10 policy
*Oct 17 11:06:22.251: ISAKMP:      encryption DES-CBC
*Oct 17 11:06:22.251: ISAKMP:      hash MD5
*Oct 17 11:06:22.251: ISAKMP:      default group 2
*Oct 17 11:06:22.251: ISAKMP:      auth pre-share
*Oct 17 11:06:22.251: ISAKMP:      life type in seconds
*Oct 17 11:06:22.251: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 0
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 1 against priority 65535 policy
*Oct 17 11:06:22.251: ISAKMP:      encryption AES-CBC
*Oct 17 11:06:22.251: ISAKMP:      hash SHA
*Oct 17 11:06:22.251: ISAKMP:      default group 2
*Oct 17 11:06:22.251: ISAKMP:      auth XAUTHInitPreShared
*Oct 17 11:06:22.251: ISAKMP:      life type in seconds
*Oct 17 11:06:22.251: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.251: ISAKMP:      keylength of 256
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 2 against priority 65535 policy
*Oct 17 11:06:22.251: ISAKMP:      encryption AES-CBC
*Oct 17 11:06:22.251: ISAKMP:      hash MD5
*Oct 17 11:06:22.251: ISAKMP:      default group 2
*Oct 17 11:06:22.251: ISAKMP:      auth XAUTHInitPreShared
*Oct 17 11:06:22.251: ISAKMP:      life type in seconds
*Oct 17 11:06:22.251: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.251: ISAKMP:      keylength of 256
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 3 against priority 65535 policy
*Oct 17 11:06:22.251: ISAKMP:      encryption AES-CBC
*Oct 17 11:06:22.251: ISAKMP:      hash SHA
*Oct 17 11:06:22.251: ISAKMP:      default group 2
*Oct 17 11:06:22.251: ISAKMP:      auth pre-share
*Oct 17 11:06:22.251: ISAKMP:      life type in seconds
*Oct 17 11:06:22.251: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.251: ISAKMP:      keylength of 256
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 4 against priority 65535 policy
*Oct 17 11:06:22.251: ISAKMP:      encryption AES-CBC
*Oct 17 11:06:22.251: ISAKMP:      hash MD5
*Oct 17 11:06:22.251: ISAKMP:      default group 2
*Oct 17 11:06:22.251: ISAKMP:      auth pre-share
*Oct 17 11:06:22.251: ISAKMP:      life type in seconds
*Oct 17 11:06:22.251: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.251: ISAKMP:      keylength of 256
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 5 against priority 65535 policy
*Oct 17 11:06:22.251: ISAKMP:      encryption AES-CBC
*Oct 17 11:06:22.251: ISAKMP:      hash SHA
*Oct 17 11:06:22.251: ISAKMP:      default group 2
*Oct 17 11:06:22.251: ISAKMP:      auth XAUTHInitPreShared
*Oct 17 11:06:22.251: ISAKMP:      life type in seconds
*Oct 17 11:06:22.251: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.251: ISAKMP:      keylength of 128
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.251: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 6 against priority 65535 policy
*Oct 17 11:06:22.251: ISAKMP:      encryption AES-CBC
*Oct 17 11:06:22.251: ISAKMP:      hash MD5
*Oct 17 11:06:22.251: ISAKMP:      default group 2
*Oct 17 11:06:22.251: ISAKMP:      auth XAUTHInitPreShared
*Oct 17 11:06:22.251: ISAKMP:      life type in seconds
*Oct 17 11:06:22.251: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.251: ISAKMP:      keylength of 128
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 7 against priority 65535 policy
*Oct 17 11:06:22.255: ISAKMP:      encryption AES-CBC
*Oct 17 11:06:22.255: ISAKMP:      hash SHA
*Oct 17 11:06:22.255: ISAKMP:      default group 2
*Oct 17 11:06:22.255: ISAKMP:      auth pre-share
*Oct 17 11:06:22.255: ISAKMP:      life type in seconds
*Oct 17 11:06:22.255: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.255: ISAKMP:      keylength of 128
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 8 against priority 65535 policy
*Oct 17 11:06:22.255: ISAKMP:      encryption AES-CBC
*Oct 17 11:06:22.255: ISAKMP:      hash MD5
*Oct 17 11:06:22.255: ISAKMP:      default group 2
*Oct 17 11:06:22.255: ISAKMP:      auth pre-share
*Oct 17 11:06:22.255: ISAKMP:      life type in seconds
*Oct 17 11:06:22.255: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.255: ISAKMP:      keylength of 128
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 9 against priority 65535 policy
*Oct 17 11:06:22.255: ISAKMP:      encryption 3DES-CBC
*Oct 17 11:06:22.255: ISAKMP:      hash SHA
*Oct 17 11:06:22.255: ISAKMP:      default group 2
*Oct 17 11:06:22.255: ISAKMP:      auth XAUTHInitPreShared
*Oct 17 11:06:22.255: ISAKMP:      life type in seconds
*Oct 17 11:06:22.255: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 10 against priority 65535 policy
*Oct 17 11:06:22.255: ISAKMP:      encryption 3DES-CBC
*Oct 17 11:06:22.255: ISAKMP:      hash MD5
*Oct 17 11:06:22.255: ISAKMP:      default group 2
*Oct 17 11:06:22.255: ISAKMP:      auth XAUTHInitPreShared
*Oct 17 11:06:22.255: ISAKMP:      life type in seconds
*Oct 17 11:06:22.255: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 11 against priority 65535 policy
*Oct 17 11:06:22.255: ISAKMP:      encryption 3DES-CBC
*Oct 17 11:06:22.255: ISAKMP:      hash SHA
*Oct 17 11:06:22.255: ISAKMP:      default group 2
*Oct 17 11:06:22.255: ISAKMP:      auth pre-share
*Oct 17 11:06:22.255: ISAKMP:      life type in seconds
*Oct 17 11:06:22.255: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.255: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 12 against priority 65535 policy
*Oct 17 11:06:22.255: ISAKMP:      encryption 3DES-CBC
*Oct 17 11:06:22.255: ISAKMP:      hash MD5
*Oct 17 11:06:22.255: ISAKMP:      default group 2
*Oct 17 11:06:22.255: ISAKMP:      auth pre-share
*Oct 17 11:06:22.259: ISAKMP:      life type in seconds
*Oct 17 11:06:22.259: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 13 against priority 65535 policy
*Oct 17 11:06:22.259: ISAKMP:      encryption DES-CBC
*Oct 17 11:06:22.259: ISAKMP:      hash MD5
*Oct 17 11:06:22.259: ISAKMP:      default group 2
*Oct 17 11:06:22.259: ISAKMP:      auth XAUTHInitPreShared
*Oct 17 11:06:22.259: ISAKMP:      life type in seconds
*Oct 17 11:06:22.259: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 14 against priority 65535 policy
*Oct 17 11:06:22.259: ISAKMP:      encryption DES-CBC
*Oct 17 11:06:22.259: ISAKMP:      hash MD5
*Oct 17 11:06:22.259: ISAKMP:      default group 2
*Oct 17 11:06:22.259: ISAKMP:      auth pre-share
*Oct 17 11:06:22.259: ISAKMP:      life type in seconds
*Oct 17 11:06:22.259: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 0
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0):no offers accepted!
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0): phase 1 SA policy not acceptable! (local rrr.rrr.rrr.rrr1 remote 88.28.100.90)
*Oct 17 11:06:22.259: ISAKMP (0:0): incrementing error counter on sa, attempt 1 of 5: construct_fail_ag_init
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0): sending packet to 88.28.100.90 my_port 500 peer_port 1291 (R) AG_NO_STATE
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0):peer does not do paranoid keepalives.

*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0):deleting SA reason "Phase1 SA policy proposal not accepted" state (R) AG_NO_STATE (peer 88.28.100.90)
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0): processing KE payload. message ID = 0
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0): group size changed! Should be 0, is 128
*Oct 17 11:06:22.259: ISAKMP (0:0): incrementing error counter on sa, attempt 2 of 5: reset_retransmission
*Oct 17 11:06:22.259: ISAKMP (0:0): Unknown Input IKE_MESG_FROM_PEER, IKE_AM_EXCH:  state = IKE_READY
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_FROM_PEER, IKE_AM_EXCH
*Oct 17 11:06:22.259: ISAKMP:(0:0:N/A:0):Old State = IKE_READY  New State = IKE_READY

*Oct 17 11:06:22.259: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Aggressive mode failed with peer at 88.28.100.90
*Oct 17 11:06:22.263: ISAKMP:(0:0:N/A:0):deleting SA reason "Phase1 SA policy proposal not accepted" state (R) AG_NO_STATE (peer 88.28.100.90)
*Oct 17 11:06:22.263: ISAKMP: Unlocking IKE struct 0x43C58990 for isadb_mark_sa_deleted(), count 0
*Oct 17 11:06:22.263: ISAKMP: Deleting peer node by peer_reap for 88.28.100.90: 43C58990
*Oct 17 11:06:22.263: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
*Oct 17 11:06:22.263: ISAKMP:(0:0:N/A:0):Old State = IKE_READY  New State = IKE_DEST_SA


routchina#sh crypto isakmp sa
dst              src               state          conn-id slot status
aaa.aaa.aaa.aaa  rrr.rrr.rrr.rrr1  QM_IDLE              3    0 ACTIVE L2L
rrr.rrr.rrr.rrr1 88.28.100.90      MM_NO_STATE          0    0 ACTIVE (deleted) VPNclient