Problem : IKE Responder: IPSec proposal does not match (Phase 2)
I am trying to setup a site to site VPN tunnel between a Sonicwall TZ170 and a Cisco ASA 5505, the tunnel is establishing o.k. but if I try to ping a host on the remote side I get the following error on both firewalls: IKE Responder: IPSec proposal does not match (Phase 2).
I have checked the proposals and pre shared key etc and everything matches at both sides but I still cannot get connectivity has anyone any ideas?
Solution : IKE Responder: IPSec proposal does not match (Phase 2)
Although I would not be much help with cisco configuration, I can explain to you what the errors mean:
IKE Responder: IPSec proposal does not match (Phase 2).
Above error indicates, that the phase 2 settings do not match; in most probability the remote and local subnets specified on the units are different.
IKE Initiator: Received notify. NO_PROPOSAL_CHOSEN
Above error indicates that the SA at both ends do not match other; there can be many reasons for this, the remote and local subnets are different, the encryption/authentication algorithms do not match, or the deffie-hellman groups are different.
