VPN problem Phase 2: Quick Mode Received Notification from Peer: no proposal chosen

[Jumper]

Hi Community,

hope you can help. I tried to configure a VPN between 2 sites. i have problems in the Phase 2 and i didn`t find the error. Log attached.

VPN sites:

Checkpoint 770 - Baracuda

Checkpoint 770 - Zyxel

[PhoneBoy]

No Proposal Chosen usually means the choice of encryption/hash algorithms is set to different values on both ends.
These settings need to be the same on both ends else a tunnel cannot be negotiated.

[samdin]

So for example de must set the same paramètres?

Phase 1: AES 256

Phase 2 : AES 256 

?

[PhoneBoy]

The parameters for phase 1 and phase 2 you choose must be the same on both sides.

[samdin]

Thank you 

Which parameters ? Key length?

[PhoneBoy]

All relevant parameters (ciphers/key length plus encryption domain).

[G_W_Albrecht · Accepted solution]

See here: sk114834: Troubleshooting the "no proposal chosen" error, sk88780: Troubleshooting "No valid SA" error and sk112054: Troubleshooting the "Encryption failure: no response from peer" error

[Jumper]

THX. worked for me.

[Morato]

Hi Jumper, which one these SKs worked to you? 

Thnks