How To: Ipsec Vpn - Authentication - Stormshield SN series Configuration Manual

Symptom: The tunnel cannot be set up.
A message "Could not get a valid proposal" in phase 2 appears in the module Logs > VPN in
l
Stormshield Network Realtime Monitor on the "responder" IPS-Firewall.
Solution: The appliances are attempting to negotiate but cannot seem to agree on an encryption
policy in phase 2 (IPSec). Check that the encryption profile is the same on both IPS-Firewalls
(authentication and encryption proposals, etc.).
Page 403/448
SNS - USER CONFIGURATION MANUAL V.3
HOW TO: IPSEC VPN - AUTHENTICATION BY PRE-SHARED KEY
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016