Troubleshooting Ike; Ike Negotiation Failed Because No Matching Ike Proposals Were Found; Ike Negotiation Failed Because No Ike Proposals Or Ike Keychains Are Referenced Correctly - HP VSR1000 Security Configuration Manual

[Outbound ESP SAs]
SPI: 3516214669 (0xd1952d8d)
Transform set: ESP-ENCRYPT-3DES-CBC ESP-AUTH-MD5
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/2313
Max received sequence-number:
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for nat traversal: Y
Status: active

Troubleshooting IKE

IKE negotiation failed because no matching IKE proposals
were found
Symptom
1. The IKE SA is in Unknown state.
<Sysname> display ike sa
Connection-ID
------------------------------------------------------------------
1
Flags:
RD--READY RL--REPLACED FD-FADING
2. When IKE event debugging and packet debugging are enabled, the following messages appear:
IKE event debugging message:
The attributes are unacceptable.
IKE packet debugging message:
Construct notification packet: NO_PROPOSAL_CHOSEN.
Analysis
Certain IKE proposal settings are incorrect.
Solution
1. Examine the IKE proposal configuration to see whether the two ends have matching IKE proposals.
2. Modify the IKE proposal configuration to make sure the two ends have matching IKE proposals.
IKE negotiation failed because no IKE proposals or IKE
keychains are referenced correctly
Symptom
1. The IKE SA is in Unknown state.
<Sysname> display ike sa
Connection-ID
Remote
192.168.222.5
Remote
240
Flag DOI
Unknown IPSEC
Flag DOI