Skip to content

Support Knowledge Base>Submit Feedback

Customer Support Center

Received notify message for DOI <1> <14> < NO_PROPOSAL_CHOSEN > (KB ID: KB6168)

Article ID: KB6168
Former Article ID: nskb3660
Published: Dec 19, 2006
Last Modified: Dec 19, 2006
Visible By: Employee, PTAC, Partner, Customer, Public

Back to Previous Page | Knowledge Base Home

Article URL

http://kb.juniper.net/KB6168

Synopsis

Received notify message for DOI <1> <14> < no_proposal_chosen >

Problem

Environment:

  • IKE Phase 1 negotiation successful
  • Phase 2 initiated negotiation before the <NO_PROPOSAL_CHOSEN> message appeared

Symptoms & Errors:

  • Received notify message for DOI <1> <14> <NO_PROPOSAL_CHOSEN>
  • IKE Phase 2 negotiation fails

Solution

If phase 2 negotiation has been initiated, and you get the message, this indicates a mismatch in proposals between the two peers.  Chances are, one side has nopfs, while the other side has perfect forward secrecy enabled.

Resolution: Change the NetScreen with nopfs-esp-3des-md5  to  g2-esp-3des-md5

For additional assistance, consult:

KB4407 - How Do I Check the Phase 2 Proposals on Both Sides of a VPN?
KB4116 - Configuring Phase 2 Proposals

 

Category Description

By Product » Hardware » Firewalls » NetScreen Firewall/IPSec VPN » NetScreen-5GT
By Product » Hardware » Firewalls » NetScreen Firewall/IPSec VPN » NetScreen-5XP
By Product » Hardware » Firewalls » NetScreen Firewall/IPSec VPN » NetScreen-5XT
By Product » Hardware » Firewalls » NetScreen Firewall/IPSec VPN » NetScreen-25
By Product » Hardware » Firewalls » NetScreen Firewall/IPSec VPN » NetScreen-50
By Product » Hardware » Firewalls » NetScreen Firewall/IPSec VPN » NetScreen-204 (EOL)
By Product » Hardware » Firewalls » NetScreen Firewall/IPSec VPN » NetScreen-208 (EOL)
By Product » Hardware » Firewalls » NetScreen Firewall/IPSec VPN » NetScreen-5200
By Product » Hardware » Firewalls » NetScreen Firewall/IPSec VPN » NetScreen-5400
By Product » Software » Network Operating Systems » ScreenOS Software

Purpose

Troubleshooting

Related Articles


Related Links


Related Files