Cisco ASA site to site tunnel error message
Received non-routine Notify message: No proposal chosen (14)
Obviously there is something wrong with the IPSEC proposal, but what? Would it be too difficult to say exactly what did not match?
It turned out that this message indicated a problem with perfect-forward secrecy being enabled on one side of the tunnel but not the other. This took some googling and scratching my head in order to figure something out that should have been quite simple. I did not have access to the other device to double check settings so I had to guess as to the problem. Not exactly what I would call the "self-healing" network.

0 Comments:
Post a Comment
Subscribe to Post Comments [Atom]
Links to this post:
Create a Link
<< Home