With wireshark tool, Cisco device send the messages 1 to section initial and SRX send messages 2 to back but Cisco didn't send memessages 3 to complete the Phase 1. *Mar 1 04:06:10.893: ISAKMP (0:134217846): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1 *Mar 1 04:06:01.041: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Informational mode failed with peer at 200.200.12.1
*Mar 1 04:06:00.885: ISAKMP:(0:118:SW:1):SA is doing pre-shared key authentication using id type ID_FQDN *Mar 1 04:06:00.853: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 88417D18 *Mar 1 04:06:00.853: ISAKMP: Locking peer struct 0x82E211FC, IKE refcount 1 for isakmp_initiator Nov 18 16:06:11 kmd: IKE negotiation failed with error: No proposal chosen. Nov 18 16:06:11 kmd: KMD_VPN_PV_PHASE1: IKE Phase-1 Failure: No proposal chosen Nov 18 16:06:11 kmd: IKE Phase-1: (Responder) Policy lookup failed
Nov 18 16:05:41 kmd: IKE negotiation failed with error: No proposal chosen.
Nov 18 16:05:41 kmd: KMD_VPN_PV_PHASE1: IKE Phase-1 Failure: No proposal chosen Nov 18 16:05:41 kmd: IKE Phase-1: (Responder) Policy lookup failed Nov 18 16:04:10 kmd: IKE negotiation failed with error: No proposal chosen. Nov 18 16:04:10 kmd: KMD_VPN_PV_PHASE1: IKE Phase-1 Failure: No proposal chosen Nov 18 16:04:10 kmd: IKE Phase-1: (Responder) Policy lookup failed Nov 18 16:03:40 kmd: IKE negotiation failed with error: No proposal chosen. But Phase 1 can't up, troubleshoot with show logs on 2 devices i run show log kmd-logs | last We need set up ipsec vpn between Juniper SRX1500 (Hub) and Cisco device (spoke) and use Aggresive mode, Cisco behind the moderm router as image attached (The result below is test with vSRX and Cisco C2600).
0 kommentar(er)
