topic Re: VPN problem Phase 2: Quick Mode Received Notification from Peer: no proposal chosen in Spark Firewall (SMB)

VPN problem Phase 2: Quick Mode Received Notification from Peer: no proposal chosen

Jumper — Sun, 15 Dec 2019 08:42:38 GMT

Hi Community,

hope you can help. I tried to configure a VPN between 2 sites. i have problems in the Phase 2 and i didn`t find the error. Log attached.

VPN sites:

Checkpoint 770 - Baracuda

Checkpoint 770 - Zyxel

Re: VPN problem Phase 2: Quick Mode Received Notification from Peer: no proposal chosen

PhoneBoy — Mon, 16 Dec 2019 02:00:09 GMT

No Proposal Chosen usually means the choice of encryption/hash algorithms is set to different values on both ends.
These settings need to be the same on both ends else a tunnel cannot be negotiated.

Re: VPN problem Phase 2: Quick Mode Received Notification from Peer: no proposal chosen

G_W_Albrecht — Tue, 17 Dec 2019 11:01:03 GMT

See here: sk114834: Troubleshooting the "no proposal chosen" error, sk88780: Troubleshooting "No valid SA" error and sk112054: Troubleshooting the "Encryption failure: no response from peer" error

Re: VPN problem Phase 2: Quick Mode Received Notification from Peer: no proposal chosen

Jumper — Wed, 18 Dec 2019 08:30:03 GMT

THX. worked for me.

Re: VPN problem Phase 2: Quick Mode Received Notification from Peer: no proposal chosen

samdin — Sat, 02 Jan 2021 23:27:54 GMT

So for example de must set the same paramètres?

Phase 1: AES 256

Phase 2 : AES 256

Re: VPN problem Phase 2: Quick Mode Received Notification from Peer: no proposal chosen

PhoneBoy — Sun, 03 Jan 2021 04:19:48 GMT

The parameters for phase 1 and phase 2 you choose must be the same on both sides.

Re: VPN problem Phase 2: Quick Mode Received Notification from Peer: no proposal chosen

samdin — Mon, 04 Jan 2021 12:41:16 GMT

Thank you

Which parameters ? Key length?

Re: VPN problem Phase 2: Quick Mode Received Notification from Peer: no proposal chosen

PhoneBoy — Mon, 04 Jan 2021 15:47:59 GMT

All relevant parameters (ciphers/key length plus encryption domain).

Re: VPN problem Phase 2: Quick Mode Received Notification from Peer: no proposal chosen

Morato — Mon, 20 Dec 2021 20:12:46 GMT

Hi Jumper, which one these SKs worked to you?

Thnks