inconsistent IPSEC VPN LAN-to-LAN configuration options

[SDWorx_2]

IF you configure a LAN-to-LAN connection somewher in the middel you have the option to set the IKE proposal.

The drop down box doens't display all the IKE proposals active in the SYSTEM-TUNNELING PROTOCOLS-IPSEC-IKE PROPOSALS.

When you read the help file, you should be able to select all the active IKE proposals.

I thus can only configure a specific IKE propsal for a LAN-to-LAN connection in the SYSTEM-POLICY MANAGEMENT-TRAFFIC MANAGEMENT-SAs.

Is this a bug or ???

[thomas.chen]

Some times your tunnel may not come up if your IKE proposal is in the "Inactive Proposals" list. To configure the active IKE Proposal select Configuration > System > Tunneling Protocols > IPSec > IKE Proposals . If your IKE proposal is in the "Inactive Proposals" list you can enable it by selecting the IKE proposal. For a better idea check out the following document,

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a00801f0f0c.shtml

[SDWorx_2]

I meant that not ALL the active IKE proposals are shown in the interface !