Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Compatibility

I have a ASA 5510 and a PIX 506 that I am trying to setup with site-to-site. However, I keep getting error in logs "All IPSec SA proposals found unacceptable". Are these two devices compatible for site-to-site? And if so what is a transform-set that will work?

2 REPLIES

Re: Compatibility

I dont see why not.

the eror indicate ISAKMP proposals are mismatched between the two VPN devices.

the last time this happened to me perfect forward secrecy was enable on one device and not on the other so make sure forward secrecy is disable on both firewalls.

Re: Compatibility

124
Views
0
Helpful
2
Replies