Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[jogo]

Hi all!

I have a VPN ipsec between two DFL 1600. Same config in both sides and it is working but I see the below warnings in the logs every 10 seconds:

Code: [Select]

Jun  8 16:39:39 10.0.0.1 [2011-06-08 16:40:01] FW: IPSEC: prio=0 id=01800102 rev=2 event=ipsec_event message="IPsec SA [Initiator] negotiation failed:"
Jun  8 16:39:39 10.0.0.1 [2011-06-08 16:40:01] FW: IPSEC: prio=0 id=01802703 rev=1 event=ike_sa_negotiation_completed action=ike_sa_completed local_peer="91.xxx.xxx.38 ID 91.xxx.xxx.38" remote_peer="222.xxx.xxx.122 ID 222.xxx.xxx.122" initiator_spi="077e7b97 cbec4f12" responder_spi="ceed12f6 341af1d7" int_severity=6
Jun  8 16:39:39 10.0.0.1 [2011-06-08 16:40:01] FW: IPSEC: prio=0 id=01800102 rev=2 event=ipsec_event message="  Local Proxy ID  10.20.0.0/16 any"
Jun  8 16:39:39 10.0.0.1 [2011-06-08 16:40:01] FW: IPSEC: prio=0 id=01800102 rev=2 event=ipsec_event message="  Remote Proxy ID 10.66.50.0/24 any"
Jun  8 16:39:39 10.0.0.1 [2011-06-08 16:40:01] FW: IPSEC: prio=0 id=01803020 rev=1 event=ipsec_sa_failed action=no_ipsec_sa statusmsg="No proposal chosen"
Jun  8 16:39:39 10.0.0.1 [2011-06-08 16:40:01] FW: IPSEC: prio=0 id=01800109 rev=1 event=ike_quickmode_failed local_ip=91.xxx.xxx.38 remote_ip=222.xxx.xxx.122 cookies=077e7b97cbec4f12ceed12f6341af1d7 reason="No proposal chosen"
cookies=077e7b97cbec4f12ceed12f6341af1d7 reason="No proposal chosen"
Jun  8 16:39:39 10.0.0.1 [2011-06-08 16:40:01] FW: IPSEC: prio=0 id=01803021 rev=1 event=ipsec_sa_statistics done=289795 success=1682 failed=288113

Same log warnings are in the other side.

Could someone explain what that does it mean?

thanks!

[danilovav]

Check
1. PSK
2. Encryption profiles (ex, for RU DFL has limited encryption)
3. Correct order of IPsec interfaces