ipsec-tools-devel

[Ipsec-tools-devel] What does this mean?

[Stephen C. <scl...@ea...>]

Hi,

We are trying to connect to a cisco with ipsec-tools 7.2 on freebsd and 
are getting this message.

isakmp_inf.c:389:isakmp_info_recv_n(): fatal NO-PROPOSAL-CHOSEN notify 
messsage, phase1 should be deleted.

Is this message from the other side? Is it saying it couldn't find a 
matching sa proposal?

Thanks alot for taking the time to make ipsec-tools what it is today.

Steve

-- 

"They that give up essential liberty to obtain temporary safety,
deserve neither liberty nor safety."  (Ben Franklin)

"The course of history shows that as a government grows, liberty
decreases."  (Thomas Jefferson)

Re: [Ipsec-tools-devel] What does this mean?

[Timo T. <tim...@ik...>]

On 11/17/2011 02:11 PM, Stephen Clark wrote:
> Hi,
> 
> We are trying to connect to a cisco with ipsec-tools 7.2 on freebsd and 
> are getting this message.
> 
> isakmp_inf.c:389:isakmp_info_recv_n(): fatal NO-PROPOSAL-CHOSEN notify 
> messsage, phase1 should be deleted.
> 
> Is this message from the other side? Is it saying it couldn't find a 
> matching sa proposal?

Yes, it means the remote device refused to pick any of the proposals
racoon sent. It means that either your remote { proposal } or sainfo {}
authentication, encryption, hash, pfs group or lifetime settings do not
match.

- Timo

Re: [Ipsec-tools-devel] What does this mean?

[Stephen C. <scl...@ea...>]

On 11/17/2011 08:41 AM, Timo Teräs wrote:
> On 11/17/2011 02:11 PM, Stephen Clark wrote:
>    
>> Hi,
>>
>> We are trying to connect to a cisco with ipsec-tools 7.2 on freebsd and
>> are getting this message.
>>
>> isakmp_inf.c:389:isakmp_info_recv_n(): fatal NO-PROPOSAL-CHOSEN notify
>> messsage, phase1 should be deleted.
>>
>> Is this message from the other side? Is it saying it couldn't find a
>> matching sa proposal?
>>      
> Yes, it means the remote device refused to pick any of the proposals
> racoon sent. It means that either your remote { proposal } or sainfo {}
> authentication, encryption, hash, pfs group or lifetime settings do not
> match.
>
> - Timo
>
>    
Hi Timo,

Thanks for the quick response.

Regards,
Steve

-- 

"They that give up essential liberty to obtain temporary safety,
deserve neither liberty nor safety."  (Ben Franklin)

"The course of history shows that as a government grows, liberty
decreases."  (Thomas Jefferson)