HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual page 467

2005.08.13 14:20:49 1: Sent out first message of main mode
2005.08.13 14:20:49 <POLICY: 1> PAYLOADS: SA,PROP,TRANS,VID,VID,VID
"Sent" indicates that these
are the local router's 2005.08.13 14:20:49
policies.
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13
2005.08.13 14:20:49
2005.08.13 14:20:49
2005.08.13 14:20:49
Figure 8-15. IKE Debug Messages: IKE Phase 1 Security Parameters
You can compare the peer's settings to yours in two ways:
Table 8-28 shows where in the local router's running-config you can find the
settings that should match the policies you see proposed by the peer.
SA PAYLOAD
Value: Seconds (1)
Initiate a connection with the peer and view the debug messages with the
local proposals
View the IKE attribute policy used with the peer by entering:
ProCurve# show crypto ike policy
Troubleshooting a VPN That Uses IPSec
DOI: 1
Situation: 1
PROPOSAL PAYLOAD
Proposal No.: 1
IANA No. for protocol: ISAKMP (1)
Size of the variable SPI field: 0
Number of transforms offered: 1
TRANSFORM PAYLOAD
Transform Number: 1
IANA Transform ID: IKE Key (1)
TRANSFORM ATTRIBUTES
SA Attrib: Group Description (4)
Length: 2
Value: DH Group 1 (1)
SA Attrib: Authentication Method (3)
Length: 2
Value: Pre-shared Key (1)
SA Attrib: Encryption Algorithm (1)
Length: 2
SA Attrib: Life Time (12)
Length: 4
Value: (28800)
Virtual Private Networks
8-81