Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IPSEC Tunnel - LAN TO LAN - 3DES - SHA1 - 3K CONCENTRATOR to BEFSX41LINKSYS

2006-09-10 01:59:54 Local6.Notice 192.168.1.250 10614 09/10/2006 01:59:54.480 SEV=4 IKE/119 RPT=222 x.x.x.x Group [x.x.x.x] PHASE 1 COMPLETED

2006-09-10 02:00:50 Local6.Warning 192.168.1.250 10616 09/10/2006 02:00:50.350 SEV=3 IKE/134 RPT=19 x.x.x.x Group [x.x.x.x] Mismatch: Configured LAN-to-LAN proposal differs from negotiated proposal. Verify local and remote LAN-to-LAN connection lists.

2006-09-10 02:00:50 Local6.Notice 192.168.1.250 10618 09/10/2006 02:00:50.350 SEV=4 IKE/119 RPT=223 x.x.x.x Group [x.x.x.x] PHASE 1 COMPLETED

Is there a difference in the way the Linksys and Cisco devices handle the Phase I ISAKMP negotiation parameters?

Notice local6.warning

2 REPLIES
Cisco Employee

Re: IPSEC Tunnel - LAN TO LAN - 3DES - SHA1 - 3K CONCENTRATOR to

Ryan,

Based upon the logs from your Concentrator:

Mismatch: Configured LAN-to-LAN proposal differs from negotiated proposal.

Verify local and remote LAN-to-LAN connection lists.

Please check the contents of your Local and Remote Network lists and make sure the network list on the Linksys side is an exact mirror image.

For example:

If you have a local network of 10.1.1.0 255.255.255.0 and a remote network of 192.168.1.0 255.255.255.0 on the VPN3000. Then the configuration on the linksys should have a local network of 192.168.1.0 255.255.255.0 and a remote network of 10.1.1.0 255.255.255.0.

Please refer the below URL for sample configuration:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009482e.shtml

I hope it helps.

Regards,

Arul

New Member

Re: IPSEC Tunnel - LAN TO LAN - 3DES - SHA1 - 3K CONCENTRATOR to

solved.

ty

259
Views
5
Helpful
2
Replies