Troubleshooting Ike; Ike Negotiation Failed Because No Matching Ike Proposals Were Found - HPE FlexNetwork 10500 Series Security Configuration Manual

# Configure a peer ID with the identity type of FQDN name and the value of www.switcha.com.
[SwitchB-ike-profile-profile2] match remote identity fqdn www.switcha.com
[SwitchB-ike-profile-profile2] quit
# Create an IKE proposal named 10.
[SwitchB] ike proposal 10
# Specify the authentication algorithm as HMAC-MD5.
[SwitchB-ike-proposal-10] authentication-algorithm md5
# Specify the RSA signature authentication method.
[SwitchB-ike-proposal-10] authentication-method rsa-signature
[SwitchB-ike-proposal-10] quit
# Create an IPsec policy template entry. Specify the template name as template1 and set the
sequence number to 1.
[SwitchB] ipsec policy-template template1 1
# Specify IPsec transform set tran1 for the IPsec policy template.
[SwitchB-ipsec-policy-template-template1-1] transform-set tran1
# Specify IKE profile profile2 for the IPsec policy template.
[SwitchB-ipsec-policy-template-template1-1] ike-profile profile2
[SwitchB-ipsec-policy-template-template1-1] quit
# Create an IKE-based IPsec policy entry by using IPsec policy template template1. Specify
the policy name as use1 and set the sequence number to 1.
[SwitchB] ipsec policy use1 1 isakmp template template1
# Apply IPsec policy use1 to VLAN-interface 1.
[SwitchB] interface vlan-interface 1
[SwitchB-Vlan-interface1] ipsec apply policy use1
Verifying the configuration
# Initiate a connection from Switch A to Switch B to trigger IKE negotiation. After IPsec SAs are
successfully negotiated by IKE, traffic between the two switches is IPsec protected.

Troubleshooting IKE

IKE negotiation failed because no matching IKE proposals
were found
Symptom
1. The IKE SA is in Unknown state.
<Sysname> display ike sa
Connection-ID
------------------------------------------------------------------
1
Flags:
RD--READY RL--REPLACED FD-FADING
2. When IKE event debugging and packet debugging are enabled, the following messages
appear:
IKE event debugging message:
The attributes are unacceptable.
IKE packet debugging message:
Remote
192.168.222.5
375
Flag DOI
Unknown IPSEC