Xin chào ! Nếu đây là lần đầu tiên bạn đến với diễn đàn, xin vui lòng danh ra một phút bấm vào đây để đăng kí và tham gia thảo luận cùng VnPro.

Announcement

Collapse
No announcement yet.

Secure VPN connection terminated locally by the VPN client . Reason 412.....

Collapse
X
Collapse
 
  • Page of 1
  • Filter
  • Time
  • Show
Clear All
new posts
Previous template Next
  • #1

    Secure VPN connection terminated locally by the VPN client . Reason 412.....

    Hi all

    Các bạn cho mình hỏi, Cty mình dùng cisco VPN client 4.0.5 (sử dụng giao thức IPsec pre-shrae key, Encytpt là DES và dùng giải thuật MD5 ) để kết nói vào mạng Cty thì gặp lỗi như sau:

    Secure VPN connection terminated locally by the VPN client
    Reason 412 the remote peer is no longer responding

    Đồng thời mình debug trên Cisco router thì gặp lỗi như sau:

    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):(Re)Setting client xauth list and state
    *Oct 8 17:47:29.304: ISAKMP/xauth: initializing AAA request
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 215 mismatch
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID is XAUTH
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID is DPD
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 123 mismatch
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID is NAT-T v2
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 194 mismatch
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID is Unity
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): Authentication by xauth preshared
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 1 against priority 100 policy
    *Oct 8 17:47:29.304: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.304: ISAKMP: hash SHA
    *Oct 8 17:47:29.304: ISAKMP: default group 2
    *Oct 8 17:47:29.304: ISAKMP: auth XAUTHInitPreShared
    *Oct 8 17:47:29.304: ISAKMP: life type in seconds
    *Oct 8 17:47:29.304: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.304: ISAKMP: keylength of 256
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 2 against priority 100 policy
    *Oct 8 17:47:29.304: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.304: ISAKMP: hash MD5
    *Oct 8 17:47:29.304: ISAKMP: default group 2
    *Oct 8 17:47:29.304: ISAKMP: auth XAUTHInitPreShared
    *Oct 8 17:47:29.304: ISAKMP: life type in seconds
    *Oct 8 17:47:29.304: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.304: ISAKMP: keylength of 256
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 3 against priority 100 policy
    *Oct 8 17:47:29.304: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.304: ISAKMP: hash SHA
    *Oct 8 17:47:29.304: ISAKMP: default group 2
    *Oct 8 17:47:29.304: ISAKMP: auth pre-share
    *Oct 8 17:47:29.304: ISAKMP: life type in seconds
    *Oct 8 17:47:29.304: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.304: ISAKMP: keylength of 256
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 4 against priority 100 policy
    *Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.308: ISAKMP: hash MD5
    *Oct 8 17:47:29.308: ISAKMP: default group 2
    *Oct 8 17:47:29.308: ISAKMP: auth pre-share
    *Oct 8 17:47:29.308: ISAKMP: life type in seconds
    *Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.308: ISAKMP: keylength of 256
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 5 against priority 100 policy
    *Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.308: ISAKMP: hash SHA
    *Oct 8 17:47:29.308: ISAKMP: default group 2
    *Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
    *Oct 8 17:47:29.308: ISAKMP: life type in seconds
    *Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.308: ISAKMP: keylength of 128
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 6 against priority 100 policy
    *Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.308: ISAKMP: hash MD5
    *Oct 8 17:47:29.308: ISAKMP: default group 2
    *Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
    *Oct 8 17:47:29.308: ISAKMP: life type in seconds
    *Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.308: ISAKMP: keylength of 128
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 7 against priority 100 policy
    *Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.308: ISAKMP: hash SHA
    *Oct 8 17:47:29.308: ISAKMP: default group 2
    *Oct 8 17:47:29.308: ISAKMP: auth pre-share
    *Oct 8 17:47:29.308: ISAKMP: life type in seconds
    *Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.308: ISAKMP: keylength of 128
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 8 against priority 100 policy
    *Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.308: ISAKMP: hash MD5
    *Oct 8 17:47:29.308: ISAKMP: default group 2
    *Oct 8 17:47:29.308: ISAKMP: auth pre-share
    *Oct 8 17:47:29.308: ISAKMP: life type in seconds
    *Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.308: ISAKMP: keylength of 128
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 9 against priority 100 policy
    *Oct 8 17:47:29.308: ISAKMP: encryption 3DES-CBC
    *Oct 8 17:47:29.308: ISAKMP: hash SHA
    *Oct 8 17:47:29.308: ISAKMP: default group 2
    *Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
    *Oct 8 17:47:29.308: ISAKMP: life type in seconds
    *Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 10 against priority 100 policy
    *Oct 8 17:47:29.308: ISAKMP: encryption 3DES-CBC
    *Oct 8 17:47:29.308: ISAKMP: hash MD5
    *Oct 8 17:47:29.308: ISAKMP: default group 2
    *Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
    *Oct 8 17:47:29.308: ISAKMP: life type in seconds
    *Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 11 against priority 100 policy
    *Oct 8 17:47:29.308: ISAKMP: encryption 3DES-CBC
    *Oct 8 17:47:29.308: ISAKMP: hash SHA
    *Oct 8 17:47:29.308: ISAKMP: default group 2
    *Oct 8 17:47:29.308: ISAKMP: auth pre-share
    *Oct 8 17:47:29.308: ISAKMP: life type in seconds
    *Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 12 against priority 100 policy
    *Oct 8 17:47:29.308: ISAKMP: encryption 3DES-CBC
    *Oct 8 17:47:29.308: ISAKMP: hash MD5
    *Oct 8 17:47:29.308: ISAKMP: default group 2
    *Oct 8 17:47:29.308: ISAKMP: auth pre-share
    *Oct 8 17:47:29.308: ISAKMP: life type in seconds
    *Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 13 against priority 100 policy
    *Oct 8 17:47:29.308: ISAKMP: encryption DES-CBC
    *Oct 8 17:47:29.308: ISAKMP: hash MD5
    *Oct 8 17:47:29.308: ISAKMP: default group 2
    *Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
    *Oct 8 17:47:29.308: ISAKMP: life type in seconds
    *Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 14 against priority 100 policy
    *Oct 8 17:47:29.308: ISAKMP: encryption DES-CBC
    *Oct 8 17:47:29.308: ISAKMP: hash MD5
    *Oct 8 17:47:29.308: ISAKMP: default group 2
    *Oct 8 17:47:29.308: ISAKMP: auth pre-share
    *Oct 8 17:47:29.308: ISAKMP: life type in seconds
    *Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 0
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 1 against priority 65535 policy
    *Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.308: ISAKMP: hash SHA
    *Oct 8 17:47:29.308: ISAKMP: default group 2
    *Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
    *Oct 8 17:47:29.308: ISAKMP: life type in seconds
    *Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.308: ISAKMP: keylength of 256
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 2 against priority 65535 policy
    *Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.308: ISAKMP: hash MD5
    *Oct 8 17:47:29.308: ISAKMP: default group 2
    *Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
    *Oct 8 17:47:29.308: ISAKMP: life type in seconds
    *Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.308: ISAKMP: keylength of 256
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 3 against priority 65535 policy
    *Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.308: ISAKMP: hash SHA
    *Oct 8 17:47:29.308: ISAKMP: default group 2
    *Oct 8 17:47:29.308: ISAKMP: auth pre-share
    *Oct 8 17:47:29.308: ISAKMP: life type in seconds
    *Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.308: ISAKMP: keylength of 256
    *Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 4 against priority 65535 policy
    *Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.312: ISAKMP: hash MD5
    *Oct 8 17:47:29.312: ISAKMP: default group 2
    *Oct 8 17:47:29.312: ISAKMP: auth pre-share
    *Oct 8 17:47:29.312: ISAKMP: life type in seconds
    *Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.312: ISAKMP: keylength of 256
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 5 against priority 65535 policy
    *Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.312: ISAKMP: hash SHA
    *Oct 8 17:47:29.312: ISAKMP: default group 2
    *Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
    *Oct 8 17:47:29.312: ISAKMP: life type in seconds
    *Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.312: ISAKMP: keylength of 128
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 6 against priority 65535 policy
    *Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.312: ISAKMP: hash MD5
    *Oct 8 17:47:29.312: ISAKMP: default group 2
    *Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
    *Oct 8 17:47:29.312: ISAKMP: life type in seconds
    *Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.312: ISAKMP: keylength of 128
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 7 against priority 65535 policy
    *Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.312: ISAKMP: hash SHA
    *Oct 8 17:47:29.312: ISAKMP: default group 2
    *Oct 8 17:47:29.312: ISAKMP: auth pre-share
    *Oct 8 17:47:29.312: ISAKMP: life type in seconds
    *Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.312: ISAKMP: keylength of 128
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 8 against priority 65535 policy
    *Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
    *Oct 8 17:47:29.312: ISAKMP: hash MD5
    *Oct 8 17:47:29.312: ISAKMP: default group 2
    *Oct 8 17:47:29.312: ISAKMP: auth pre-share
    *Oct 8 17:47:29.312: ISAKMP: life type in seconds
    *Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.312: ISAKMP: keylength of 128
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 9 against priority 65535 policy
    *Oct 8 17:47:29.312: ISAKMP: encryption 3DES-CBC
    *Oct 8 17:47:29.312: ISAKMP: hash SHA
    *Oct 8 17:47:29.312: ISAKMP: default group 2
    *Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
    *Oct 8 17:47:29.312: ISAKMP: life type in seconds
    *Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 10 against priority 65535 policy
    *Oct 8 17:47:29.312: ISAKMP: encryption 3DES-CBC
    *Oct 8 17:47:29.312: ISAKMP: hash MD5
    *Oct 8 17:47:29.312: ISAKMP: default group 2
    *Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
    *Oct 8 17:47:29.312: ISAKMP: life type in seconds
    *Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 11 against priority 65535 policy
    *Oct 8 17:47:29.312: ISAKMP: encryption 3DES-CBC
    *Oct 8 17:47:29.312: ISAKMP: hash SHA
    *Oct 8 17:47:29.312: ISAKMP: default group 2
    *Oct 8 17:47:29.312: ISAKMP: auth pre-share
    *Oct 8 17:47:29.312: ISAKMP: life type in seconds
    *Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 12 against priority 65535 policy
    *Oct 8 17:47:29.312: ISAKMP: encryption 3DES-CBC
    *Oct 8 17:47:29.312: ISAKMP: hash MD5
    *Oct 8 17:47:29.312: ISAKMP: default group 2
    *Oct 8 17:47:29.312: ISAKMP: auth pre-share
    *Oct 8 17:47:29.312: ISAKMP: life type in seconds
    *Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 13 against priority 65535 policy
    *Oct 8 17:47:29.312: ISAKMP: encryption DES-CBC
    *Oct 8 17:47:29.312: ISAKMP: hash MD5
    *Oct 8 17:47:29.312: ISAKMP: default group 2
    *Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
    *Oct 8 17:47:29.312: ISAKMP: life type in seconds
    *Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 14 against priority 65535 policy
    *Oct 8 17:47:29.312: ISAKMP: encryption DES-CBC
    *Oct 8 17:47:29.312: ISAKMP: hash MD5
    *Oct 8 17:47:29.312: ISAKMP: default group 2
    *Oct 8 17:47:29.312: ISAKMP: auth pre-share
    *Oct 8 17:47:29.312: ISAKMP: life type in seconds
    *Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 0
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):no offers accepted!
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0): phase 1 SA policy not acceptable! (local 203.160.0.94 remo
    te 221.132.28.228)
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):peer does not do paranoid keepalives.

    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):deleting SA reason "Phase1 SA policy proposal not accepted"
    state (R) AG_NO_STATE (peer 221.132.28.228)
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0): processing KE payload. message ID = 0
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0): group size changed! Should be 0, is 128
    *Oct 8 17:47:29.312: ISAKMP (0:0): Unknown Input IKE_MESG_FROM_PEER, IKE_AM_EXCH: state = IKE_READ
    Y
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_FROM_PEER, IKE_AM_EXCH
    *Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Old State = IKE_READY New State = IKE_READY

    *Oct 8 17:47:29.312: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Aggressive mode failed with peer at
    221.132.28.228
    *Oct 8 17:47:29.316: ISAKMP:(0:0:N/A:0):deleting SA reason "Phase1 SA policy proposal not accepted"
    state (R) AG_NO_STATE (peer 221.132.28.228)
    *Oct 8 17:47:29.316: ISAKMP: Unlocking IKE struct 0x64C2A57C for isadb_mark_sa_deleted(), count 0
    *Oct 8 17:47:29.316: ISAKMP: Deleting peer node by peer_reap for 221.132.28.228: 64C2A57C
    *Oct 8 17:47:29.316: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
    *Oct 8 17:47:29.316: ISAKMP:(0:0:N/A:0):Old State = IKE_READY New State = IKE_DEST_SA

    *Oct 8 17:47:34.424: ISAKMP (0:0): received packet from 221.132.28.228 dport 500 sport 500 Global (
    R) MM_NO_STATE
    *Oct 8 17:47:39.416: ISAKMP (0:0): received packet from 221.132.28.228 dport 500 sport 500 Global (
    R) MM_NO_STATE
    *Oct 8 17:47:44.412: ISAKMP (0:0): received packet from 221.132.28.228 dport 500 sport 500 Global (
    R) MM_NO_STATE
    *Oct 8 17:48:29.316: ISAKMP:(0:0:N/A:0):Can't decrement IKE Call Admisstion Control stat incoming_negotiating since it's already 0.
    *Oct 8 17:48:29.316: ISAKMP:(0:0:N/A:0):purging SA., sa=64C41700, delme=64C41700

    Các bạn có ai biết lổi gì giúp mình với

    Cám ơn nhiều
    Tags: None
  • #2
    Hi

    tra cứu lỗi của VPN theo link này:

    Cisco Networking for Service Providers
    http://www.cisco.com/en/US/netsol/ns341/ns396/ns172/ns334/networking_solutions_design_guide_chapter09186a008017e282.html#wp1076649
    Find the scalable network infrastructure and software solutions to address your challenges with Cisco Networking for service providers.


    theo đó, lỗi:

    *Oct 8 17:47:29.312: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Aggressive mode failed with peer at 221.132.28.228

    là do:

    The polices and configurations on the two peers do not match.

    cấu hình VPN ở hai đầu không giống nhau.

    Giải pháp:

    Kiểm tra các thông số VPN ở hai đầu để đảm bảo là đúng và tương thích nhau.
    Đặng Quang Minh, CCIEx2#11897 (Enterprise Infrastructure, Wireless), DEVNET, CCSI#31417

    Email : dangquangminh@vnpro.org
    https://www.facebook.com/groups/vietprofessional/

    Comment

    Previous template Next
    Working...
    X