Desktop

Ask something
Question Locked

I need your help

0 helpful
3 replies

by phamphihung

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Dear all,

Now, I also get this error in my router 7200: "CRYPTO-6-IKMP_MODE_FAILURE: Processing of Aggressive mode failed with peer at (IP of remote computer here)" Please help me to fix this.

Thank you

Hung Pham

3 replies

by moiseev

May be ISAKMP transform sets doesn't match policies like in example below?

debug crypto isakmp

068134: Jan 31 16:12:49.493 UTC: ISAKMP:(0):Checking ISAKMP transform 1 against priority 1 policy
068135: Jan 31 16:12:49.497 UTC: ISAKMP: encryption AES-CBC
068136: Jan 31 16:12:49.497 UTC: ISAKMP: hash SHA
068137: Jan 31 16:12:49.497 UTC: ISAKMP: default group 2
068138: Jan 31 16:12:49.497 UTC: ISAKMP: auth XAUTHInitPreShared
068139: Jan 31 16:12:49.497 UTC: ISAKMP: life type in seconds
068140: Jan 31 16:12:49.497 UTC: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
068141: Jan 31 16:12:49.497 UTC: ISAKMP: keylength of 256
068142: Jan 31 16:12:49.497 UTC: ISAKMP:(0):Diffie-Hellman group offered does not match policy!

This discussion is closed to new replies.