How Do I Check the Phase 2 Proposals on Both Sides of a VPN?
Knowledge Base ID: KB4407
Version: 3.0
Published: 07 Oct 2008
Updated: 07 Oct 2008
Categories: . NS-5GT
. NS-5XP
. NS-5XT
. NS-25
. NS-50
. NS-204
. NS-208
. NS-5200
. NS-5400
. IPSec

Synopsis:
How Do I Check the Phase 2 Proposals on Both Sides of a VPN?

Problem:

Solution:

Note: This article applies to ScreenOS 4.0 and higher.

To check the phase 2 proposals on both sides, perform the following steps:

Open the WebUI. For more information on accessing the WebUI, go to Accessing Your NetScreen Using the WebUI.

From the NetScreen options menu, click VPNs, and then click AutoKey IKE.

Image of step two


Locate the VPN, and then click Edit.

Image of step three


Click Advanced.

Image of step four


Verify the Phase 2 Proposal settings.

Image of step five


Connect to the other NetScreen device, and repeat Step 2 through Step 5. Configure the Phase 2 proposal to match the settings of the first NetScreen device.

Purpose:
Troubleshooting