How Do I Ensure That the Phase 1 Proposals on Both Sides of a VPN Match?
Knowledge Base ID: KB4406
Version: 3.0
Published: 07 Oct 2008
Updated: 07 Oct 2008
Categories: . NS-5GT
. NS-5XP
. NS-5XT
. NS-25
. NS-50
. NS-204
. NS-208
. NS-5200
. NS-5400
. IPSec

Synopsis:
How Do I Ensure That the Phase 1 Proposals on Both Sides of a VPN Match?

Problem:

Solution:

Note: This article applies to ScreenOS 4.0 and higher.

To ensure that phase 1 proposals on both sides match, perform the following steps:

Open the WebUI. For more information on accessing the WebUI, go to Accessing Your NetScreen Using the WebUI.

From the NetScreen options menu, click VPNs, select AutoKey Advanced, and then click Gateway.

Locate the VPN gateway, and then click Edit.

Click Advanced.

Verify the Phase 1 Proposal settings.

Connect to the other NetScreen device, and repeat Step 2 through Step 5. Configure the Phase 1 proposal to match the settings of the first NetScreen device.

Purpose:
Troubleshooting