Troubleshooting Ike; Invalid User Id; Proposal Mismatch - HP A6600 Configuration Manual

Troubleshooting IKE

When configuring parameters to establish an IPsec tunnel, enable IKE error debugging to locate
configuration problems:
<Router> debugging ike error

Invalid user ID

Symptom
Invalid user ID.
Analysis
In IPsec, user IDs are used to identify data flows and to set up different IPsec tunnels for different data
flows. Now, the IP address and username are used as the user ID.
The following is the debugging information:
got NOTIFY of type INVALID_ID_INFORMATION
Or
drop message from A.B.C.D due to notification type INVALID_ID_INFORMATION
Solution
Check that the ACLs in the IPsec policies configured on the interfaces at both ends are compatible.
Configure the ACLs to mirror each other. For more information, see

Proposal mismatch

Symptom
The proposals do not match.
Analysis
The following is the debugging information:
got NOTIFY of type NO_PROPOSAL_CHOSEN
Or
drop message from A.B.C.D due to notification type NO_PROPOSAL_CHOSEN
The two parties in the negotiation have no matched proposals.
Solution
For the negotiation in phase 1, look up the IKE proposals for a match. For the negotiation in phase 2,
check whether the parameters of the IPsec policies applied on the interfaces are matched and whether
the referred IPsec proposals have a match in protocol, encryption, and authentication algorithms.
"Configuring
303
IPsec."