On 8/22/06, <b class="gmail_sendername">Andy Gay</b> <<a href="mailto:andy@andynet.net">andy@andynet.net</a>> wrote:<div><span class="gmail_quote"></span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
On Tue, 2006-08-22 at 11:53 -0400, Glenn Henshaw wrote:<br>> What can cause the "NO_PROPOSAL_CHOSEN" message from the Cisco?<br>><br>The 2 ends can't agree on phase2 parameters. Everything has to match -
<br>left/right subnets, encryption/authentication algorithms, PFS, probably<br>more...</blockquote><div><br>Similar problem here: trying to connect to a Cisco (no idea what model), we get to this:<br> <font size="3"><font color="#000000">
<font face="Arial"><font size="1"><span style="font-family: courier new,monospace;">Nov 14 11:09:03 [pluto] "NYC" #6: initiating Quick Mode PSK+ENCRYPT+COMPRESS+TUNNEL+PFS+UP {using isakmp#5}</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Nov 14 11:09:03 [pluto] "NYC" #5: ignoring informational payload, type NO_PROPOSAL_CHOSEN</span></font><br></font></font></font></div><br></div>The owner of the Cisco thing tell us that cisco doesn't like quick mode, and that we have to disable quick mode in openswan.
<br><br>Does this sound right? And if yes, how would I do it?<br><br>Thank you!<br>/Christian<br>