Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

3005 IKE proposals

Hello to all,

my 3005 concentrator has many IKE proposals opted, but the 3002 client is not matching up on any. Here is a sample of the 3005 concentrator event log -

9375 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52540

Proposal # 1, Transform # 17, Type ISAKMP, Id IKE

Parsing received transform:

Phase 1 failure against global IKE proposal # 1:

Rcv'd Key Length attr class, but class is not cfg'd

9379 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52541

Phase 1 failure against global IKE proposal # 2:

Rcv'd Key Length attr class, but class is not cfg'd

9381 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52542

Phase 1 failure against global IKE proposal # 3:

Rcv'd Key Length attr class, but class is not cfg'd

9383 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52543

Phase 1 failure against global IKE proposal # 4:

Rcv'd Key Length attr class, but class is not cfg'd

9385 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52544

Phase 1 failure against global IKE proposal # 5:

Mismatched attr types for class Key Length:

Rcv'd: 256 Bits

Cfg'd: 128 Bits

9388 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52545

Phase 1 failure against global IKE proposal # 6:

Mismatched attr types for class Key Length:

Rcv'd: 256 Bits

Cfg'd: 128 Bits

9391 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52546

Phase 1 failure against global IKE proposal # 7:

Mismatched attr types for class Key Length:

Rcv'd: 256 Bits

Cfg'd: 192 Bits

9394 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52547

Phase 1 failure against global IKE proposal # 8:

Mismatched attr types for class Key Length:

Rcv'd: 256 Bits

Cfg'd: 192 Bits

9397 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52548

Phase 1 failure against global IKE proposal # 9:

Mismatched attr types for class Hash Alg:

Rcv'd: SHA

Cfg'd: MD5

9399 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52549

Phase 1 failure against global IKE proposal # 10:

Mismatched attr types for class Auth Method:

Rcv'd: Preshared Key

Cfg'd: XAUTH with Preshared Key (Initiator authenticated)

9403 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52550

Phase 1 failure against global IKE proposal # 11:

Rcv'd Key Length attr class, but class is not cfg'd

9405 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52551

Phase 1 failure against global IKE proposal # 12:

Rcv'd Key Length attr class, but class is not cfg'd

9407 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52552

Phase 1 failure against global IKE proposal # 13:

Rcv'd Key Length attr class, but class is not cfg'd

9409 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52553

Phase 1 failure against global IKE proposal # 14:

Rcv'd Key Length attr class, but class is not cfg'd

9411 09/26/2007 20:17:41.800 SEV=8 IKEDBG/79 RPT=52554

Phase 1 failure against global IKE proposal # 15:

Mismatched attr types for class Key Length:

Rcv'd: 256 Bits

Cfg'd: 128 Bits

Thanx for any help!

1 REPLY
Bronze

Re: 3005 IKE proposals

The VPN 3000 Concentrator might not decrement the Simultaneous IKE counter correctly while under a very heavy load of incoming IKE sessions. Can you please send error message and also client configuration. Without this information it is very difficult to find accurate solution?

236
Views
0
Helpful
1
Replies
CreatePlease to create content