ISAKMP ERROR

[r.kate]

Hi ,

I am trying to connect to a PIX 515 E with l2tp ,ipsec on a windows 2000 .

On the pix I am getting this error .

ISAKMP: authenticator is HMAC-SHAIPSEC(validate_proposal): transform proposal (prot 3, trans 3, hmac_alg 2) not supported

Any help appreciated .

Raj

[beth-martin]

This message indicates that your ISAKMP phase 2 negotiations have failed. This is the phase where the IPSec SA is negotiated. This message is usually seen when a proposal mismatch occurs. Use need to confirm that the transform sets configured on both the ends are the same. Atleast one transform set must be identical on both the ends. For example, if I am using MD5 and ESP on one end, I must specify the same for the other end too.