RE: Help - Problem VPN Cisco Pix 515E

You do not have to same (identical configuration) at both ends.  
Check your ISAKMP Encryption, HASH and DiffeHellman  Group - if these do not
match, phase 1 will fail.  
Also ensure you IPSEC transform set at both ends also match.
>   
> I have a problem, I am trying to establish a tunnel with
> other company that possesses a firewall same to mine - Cisco 
> Pix 515, but I don't get, the presented message is the 
> following:
> 
> crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131 OAK_QM 
> exchange
> oakley_process_quick_mode:
> OAK_QM_IDLE
> ISAKMP (0): processing SA payload. message ID = 3011867608
> 
> ISAKMP : Checking IPSec proposal 1
> 
> ISAKMP: transform 1, ESP_3DES
> ISAKMP:   attributes in transform:
> ISAKMP:      encaps is 1
> ISAKMP:      SA life type in seconds
> ISAKMP:      SA life duration (basic) of 28800
> ISAKMP:      SA life type in kilobytes
> ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0
> ISAKMP:      authenticator is HMAC-MD5
> ISAKMP:      group is 2
> ISAKMP (0): atts not acceptable. Next payload is 0
> ISAKMP (0): SA not acceptable!
> ISAKMP (0): sending NOTIFY message 14 protocol 0
> return status is IKMP_ERR_NO_RETRANS**
> crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131 ISAKMP (0:0): 
> phase 2 packet is a duplicate of a previous packet.
> crypto_isakmp_process_block: x.x.x.2, dest x.x.x.131
> ISAKMP (0:0): phase 2 packet is a duplicate of a previous 
> packet.
> crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
> ISAKMP (0:0): phase 2 packet is a duplicate of a previous 
> packet.
> crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
> ISAKMP (0:0): phase 2 packet is a duplicate of a previous 
> packet.
> crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
> VPN Peer: ISAKMP: Peer ip:200.182.223.2 Ref cnt incremented 
> to:2 Total VPN Peers
> :2
> OAK_MM exchange
> ISAKMP (0): processing SA payload. message ID = 0
> 
> ISAKMP (0): Checking ISAKMP transform 1 against priority 1
> policy
> ISAKMP:      encryption 3DES-CBC
> ISAKMP:      hash MD5
> ISAKMP:      default group 2
> ISAKMP:      auth pre-share
> ISAKMP:      life type in seconds
> ISAKMP:      life duration (basic) of 7200
> ISAKMP (0): atts are acceptable. Next payload is 3
> ISAKMP (0): SA is doing pre-shared key authentication using 
> id type ID_IPV4_ADDR
> return status is IKMP_NO_ERROR
> crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
> OAK_MM exchange
> ISAKMP (0): processing KE payload. message ID = 0
> 
> ISAKMP (0): processing NONCE payload. message ID = 0
> 
> ISAKMP (0): processing vendor id payload
> 
> ISAKMP (0): processing vendor id payload
> 
> ISAKMP (0): remote peer supports dead peer detection
> 
> ISAKMP (0): processing vendor id payload
> 
> ISAKMP (0): speaking to another IOS box!
> 
> return status is IKMP_NO_ERROR
> crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131 OAK_MM 
> exchange ISAKMP (0): processing ID payload. message ID = 0
> ISAKMP (0): processing HASH payload. message ID = 0
> ISAKMP (0): SA has been authenticated
> 
> ISAKMP (0): ID payload
>         next-payload : 8
>         type         : 1
>         protocol     : 17
>         port         : 500
>         length       : 8
> ISAKMP (0): Total payload length: 12
> return status is IKMP_NO_ERROR
> crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131 OAK_QM 
> exchange
> oakley_process_quick_mode:
> OAK_QM_IDLE
> ISAKMP (0): processing SA payload. message ID = 1458594770
> 
> ISAKMP : Checking IPSec proposal 1
> 
> ISAKMP: transform 1, ESP_3DES
> ISAKMP:   attributes in transform:
> ISAKMP:      encaps is 1
> ISAKMP:      SA life type in seconds
> ISAKMP:      SA life duration (basic) of 28800
> ISAKMP:      SA life type in kilobytes
> ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0
> ISAKMP:      authenticator is HMAC-MD5
> ISAKMP:      group is 2
> ISAKMP (0): atts not acceptable. Next payload is 0
> ISAKMP (0): SA not acceptable!
> ISAKMP (0): sending NOTIFY message 14 protocol 0
> return status is IKMP_ERR_NO_RETRANS
> crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131 ISAKMP (0): 
> processing DELETE payload. message ID = 3302399666 ISAKMP (0): 
> deleting SA: src x.x.x.2, dst x.x.x.131 return status is 
> IKMP_NO_ERR_NO_TRANS
> crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131 ISAKMP (0): 
> processing NOTIFY payload 24578 protocol 1
>         spi 0, message ID = 1981775628
> ISAKMP (0): processing notify INITIAL_CONTACT
> return status is IKMP_NO_ERR_NO_TRANS
> ISADB: reaper checking SA 0x8161af60, conn_id = 0
> ISADB: reaper checking SA 0x81530c78, conn_id = 0  DELETE IT!
> 
> VPN Peer: ISAKMP: Peer ip:x.x.x.2 Ref cnt decremented to:1
> Total VPN Peers
> :2
> ISADB: reaper checking SA 0x8161af60, conn_id = 0
> ISADB: reaper checking SA 0x81617f48, conn_id = 0
> crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
> ISAKMP (0:0): phase 2 packet is a duplicate of a previous 
> packet.
> crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
> OAK_QM exchange
> oakley_process_quick_mode:
> OAK_QM_IDLE
> ISAKMP (0): processing SA payload. message ID = 933563993
> 
> 
> Please, does anybody know him what this can be?
> 
> 
> Thanks
> 
> Lennon
> 
>  
> ---
> Acabe com aquelas janelinhas que pulam na sua tela. AntiPop-up UOL - Ã 
> grátis! http://antipopup.uol.com.br
> 
> _______________________________________________
> VPN mailing list
> [email protected] http://lists.shmoo.com/mailman/listinfo/vpn
-- 

-> Jean-Francois Dive
--> [email protected]

I think that God in creating Man somewhat overestimated his ability.
-- Oscar Wilde

_______________________________________________
VPN mailing list
[email protected]
http://lists.shmoo.com/mailman/listinfo/vpn