violeteyes
14-10-2005, 11:00 AM
Hi all
Các bạn cho mình hỏi, Cty mình dùng cisco VPN client 4.0.5 (sử dụng giao thức IPsec pre-shrae key, Encytpt là DES và dùng giải thuật MD5 ) để kết nói vào mạng Cty thì gặp lỗi như sau:
Secure VPN connection terminated locally by the VPN client
Reason 412 the remote peer is no longer responding
Đồng thời mình debug trên Cisco router thì gặp lỗi như sau:
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):(Re)Setting client xauth list and state
*Oct 8 17:47:29.304: ISAKMP/xauth: initializing AAA request
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 215 mismatch
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID is XAUTH
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID is DPD
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 123 mismatch
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID is NAT-T v2
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 194 mismatch
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID is Unity
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): Authentication by xauth preshared
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 1 against priority 100 policy
*Oct 8 17:47:29.304: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.304: ISAKMP: hash SHA
*Oct 8 17:47:29.304: ISAKMP: default group 2
*Oct 8 17:47:29.304: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.304: ISAKMP: life type in seconds
*Oct 8 17:47:29.304: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.304: ISAKMP: keylength of 256
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 2 against priority 100 policy
*Oct 8 17:47:29.304: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.304: ISAKMP: hash MD5
*Oct 8 17:47:29.304: ISAKMP: default group 2
*Oct 8 17:47:29.304: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.304: ISAKMP: life type in seconds
*Oct 8 17:47:29.304: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.304: ISAKMP: keylength of 256
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 3 against priority 100 policy
*Oct 8 17:47:29.304: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.304: ISAKMP: hash SHA
*Oct 8 17:47:29.304: ISAKMP: default group 2
*Oct 8 17:47:29.304: ISAKMP: auth pre-share
*Oct 8 17:47:29.304: ISAKMP: life type in seconds
*Oct 8 17:47:29.304: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.304: ISAKMP: keylength of 256
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 4 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth pre-share
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 256
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 5 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash SHA
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 128
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 6 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 128
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 7 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash SHA
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth pre-share
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 128
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 8 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth pre-share
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 128
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 9 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash SHA
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 10 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 11 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash SHA
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth pre-share
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 12 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth pre-share
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 13 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption DES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 14 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption DES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth pre-share
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 0
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 1 against priority 65535 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash SHA
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 256
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 2 against priority 65535 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 256
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 3 against priority 65535 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash SHA
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth pre-share
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 256
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 4 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash MD5
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth pre-share
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP: keylength of 256
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 5 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash SHA
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP: keylength of 128
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 6 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash MD5
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP: keylength of 128
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 7 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash SHA
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth pre-share
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP: keylength of 128
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 8 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash MD5
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth pre-share
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP: keylength of 128
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 9 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash SHA
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 10 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash MD5
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 11 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash SHA
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth pre-share
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 12 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash MD5
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth pre-share
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 13 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption DES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash MD5
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 14 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption DES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash MD5
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth pre-share
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 0
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):no offers accepted!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0): phase 1 SA policy not acceptable! (local 203.160.0.94 remo
te 221.132.28.228)
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):peer does not do paranoid keepalives.
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):deleting SA reason "Phase1 SA policy proposal not accepted"
state (R) AG_NO_STATE (peer 221.132.28.228)
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0): processing KE payload. message ID = 0
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0): group size changed! Should be 0, is 128
*Oct 8 17:47:29.312: ISAKMP (0:0): Unknown Input IKE_MESG_FROM_PEER, IKE_AM_EXCH: state = IKE_READ
Y
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_FROM_PEER, IKE_AM_EXCH
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Old State = IKE_READY New State = IKE_READY
*Oct 8 17:47:29.312: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Aggressive mode failed with peer at
221.132.28.228
*Oct 8 17:47:29.316: ISAKMP:(0:0:N/A:0):deleting SA reason "Phase1 SA policy proposal not accepted"
state (R) AG_NO_STATE (peer 221.132.28.228)
*Oct 8 17:47:29.316: ISAKMP: Unlocking IKE struct 0x64C2A57C for isadb_mark_sa_deleted(), count 0
*Oct 8 17:47:29.316: ISAKMP: Deleting peer node by peer_reap for 221.132.28.228: 64C2A57C
*Oct 8 17:47:29.316: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
*Oct 8 17:47:29.316: ISAKMP:(0:0:N/A:0):Old State = IKE_READY New State = IKE_DEST_SA
*Oct 8 17:47:34.424: ISAKMP (0:0): received packet from 221.132.28.228 dport 500 sport 500 Global (
R) MM_NO_STATE
*Oct 8 17:47:39.416: ISAKMP (0:0): received packet from 221.132.28.228 dport 500 sport 500 Global (
R) MM_NO_STATE
*Oct 8 17:47:44.412: ISAKMP (0:0): received packet from 221.132.28.228 dport 500 sport 500 Global (
R) MM_NO_STATE
*Oct 8 17:48:29.316: ISAKMP:(0:0:N/A:0):Can't decrement IKE Call Admisstion Control stat incoming_negotiating since it's already 0.
*Oct 8 17:48:29.316: ISAKMP:(0:0:N/A:0):purging SA., sa=64C41700, delme=64C41700
Các bạn có ai biết lổi gì giúp mình với
Cám ơn nhiều
Các bạn cho mình hỏi, Cty mình dùng cisco VPN client 4.0.5 (sử dụng giao thức IPsec pre-shrae key, Encytpt là DES và dùng giải thuật MD5 ) để kết nói vào mạng Cty thì gặp lỗi như sau:
Secure VPN connection terminated locally by the VPN client
Reason 412 the remote peer is no longer responding
Đồng thời mình debug trên Cisco router thì gặp lỗi như sau:
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):(Re)Setting client xauth list and state
*Oct 8 17:47:29.304: ISAKMP/xauth: initializing AAA request
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 215 mismatch
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID is XAUTH
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID is DPD
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 123 mismatch
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID is NAT-T v2
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 194 mismatch
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): processing vendor id payload
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): vendor ID is Unity
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0): Authentication by xauth preshared
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 1 against priority 100 policy
*Oct 8 17:47:29.304: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.304: ISAKMP: hash SHA
*Oct 8 17:47:29.304: ISAKMP: default group 2
*Oct 8 17:47:29.304: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.304: ISAKMP: life type in seconds
*Oct 8 17:47:29.304: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.304: ISAKMP: keylength of 256
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 2 against priority 100 policy
*Oct 8 17:47:29.304: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.304: ISAKMP: hash MD5
*Oct 8 17:47:29.304: ISAKMP: default group 2
*Oct 8 17:47:29.304: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.304: ISAKMP: life type in seconds
*Oct 8 17:47:29.304: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.304: ISAKMP: keylength of 256
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.304: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 3 against priority 100 policy
*Oct 8 17:47:29.304: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.304: ISAKMP: hash SHA
*Oct 8 17:47:29.304: ISAKMP: default group 2
*Oct 8 17:47:29.304: ISAKMP: auth pre-share
*Oct 8 17:47:29.304: ISAKMP: life type in seconds
*Oct 8 17:47:29.304: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.304: ISAKMP: keylength of 256
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 4 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth pre-share
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 256
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 5 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash SHA
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 128
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 6 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 128
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 7 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash SHA
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth pre-share
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 128
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 8 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth pre-share
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 128
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 9 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash SHA
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 10 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 11 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash SHA
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth pre-share
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 12 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth pre-share
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 13 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption DES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 14 against priority 100 policy
*Oct 8 17:47:29.308: ISAKMP: encryption DES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth pre-share
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 0
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 1 against priority 65535 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash SHA
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 256
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 2 against priority 65535 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash MD5
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 256
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 3 against priority 65535 policy
*Oct 8 17:47:29.308: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.308: ISAKMP: hash SHA
*Oct 8 17:47:29.308: ISAKMP: default group 2
*Oct 8 17:47:29.308: ISAKMP: auth pre-share
*Oct 8 17:47:29.308: ISAKMP: life type in seconds
*Oct 8 17:47:29.308: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.308: ISAKMP: keylength of 256
*Oct 8 17:47:29.308: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 4 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash MD5
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth pre-share
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP: keylength of 256
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 5 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash SHA
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP: keylength of 128
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 6 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash MD5
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP: keylength of 128
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 7 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash SHA
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth pre-share
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP: keylength of 128
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 8 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption AES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash MD5
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth pre-share
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP: keylength of 128
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 9 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash SHA
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 10 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash MD5
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 11 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash SHA
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth pre-share
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 12 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption 3DES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash MD5
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth pre-share
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 13 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption DES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash MD5
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth XAUTHInitPreShared
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 14 against priority 65535 policy
*Oct 8 17:47:29.312: ISAKMP: encryption DES-CBC
*Oct 8 17:47:29.312: ISAKMP: hash MD5
*Oct 8 17:47:29.312: ISAKMP: default group 2
*Oct 8 17:47:29.312: ISAKMP: auth pre-share
*Oct 8 17:47:29.312: ISAKMP: life type in seconds
*Oct 8 17:47:29.312: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 0
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):no offers accepted!
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0): phase 1 SA policy not acceptable! (local 203.160.0.94 remo
te 221.132.28.228)
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):peer does not do paranoid keepalives.
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):deleting SA reason "Phase1 SA policy proposal not accepted"
state (R) AG_NO_STATE (peer 221.132.28.228)
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0): processing KE payload. message ID = 0
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0): group size changed! Should be 0, is 128
*Oct 8 17:47:29.312: ISAKMP (0:0): Unknown Input IKE_MESG_FROM_PEER, IKE_AM_EXCH: state = IKE_READ
Y
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_FROM_PEER, IKE_AM_EXCH
*Oct 8 17:47:29.312: ISAKMP:(0:0:N/A:0):Old State = IKE_READY New State = IKE_READY
*Oct 8 17:47:29.312: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Aggressive mode failed with peer at
221.132.28.228
*Oct 8 17:47:29.316: ISAKMP:(0:0:N/A:0):deleting SA reason "Phase1 SA policy proposal not accepted"
state (R) AG_NO_STATE (peer 221.132.28.228)
*Oct 8 17:47:29.316: ISAKMP: Unlocking IKE struct 0x64C2A57C for isadb_mark_sa_deleted(), count 0
*Oct 8 17:47:29.316: ISAKMP: Deleting peer node by peer_reap for 221.132.28.228: 64C2A57C
*Oct 8 17:47:29.316: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
*Oct 8 17:47:29.316: ISAKMP:(0:0:N/A:0):Old State = IKE_READY New State = IKE_DEST_SA
*Oct 8 17:47:34.424: ISAKMP (0:0): received packet from 221.132.28.228 dport 500 sport 500 Global (
R) MM_NO_STATE
*Oct 8 17:47:39.416: ISAKMP (0:0): received packet from 221.132.28.228 dport 500 sport 500 Global (
R) MM_NO_STATE
*Oct 8 17:47:44.412: ISAKMP (0:0): received packet from 221.132.28.228 dport 500 sport 500 Global (
R) MM_NO_STATE
*Oct 8 17:48:29.316: ISAKMP:(0:0:N/A:0):Can't decrement IKE Call Admisstion Control stat incoming_negotiating since it's already 0.
*Oct 8 17:48:29.316: ISAKMP:(0:0:N/A:0):purging SA., sa=64C41700, delme=64C41700
Các bạn có ai biết lổi gì giúp mình với
Cám ơn nhiều