topic Re: About vpn error log in General Topics https://live.paloaltonetworks.com/t5/general-topics/about-vpn-error-log/m-p/14344#M10537 <HTML><HEAD></HEAD><BODY><P>This indicates mismatch with remote site.</P><P>Check proposals for IKE and IPSec. Make sure traffic is not NATed.</P><P>If you are using cisco at remote end, select DH-group 'no-pfs' for the proposal.</P><P></P><P>If tunnel is up and working, these messages may be during the negotiation.</P></BODY></HTML> Tue, 01 Oct 2013 01:38:44 GMT ukhapre 2013-10-01T01:38:44Z About vpn error log https://live.paloaltonetworks.com/t5/general-topics/about-vpn-error-log/m-p/14340#M10533 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>What does "received unencrypted Notify payload(INVALID COOKIE) from IP ...to&nbsp; ...&nbsp; ignored "&nbsp; mean ?</P><P></P><P>Thanks.</P></BODY></HTML> Thu, 26 Sep 2013 10:24:13 GMT https://live.paloaltonetworks.com/t5/general-topics/about-vpn-error-log/m-p/14340#M10533 Retired Member 2013-09-26T10:24:13Z Re: About vpn error log https://live.paloaltonetworks.com/t5/general-topics/about-vpn-error-log/m-p/14341#M10534 <HTML><HEAD></HEAD><BODY><P>Probably the proposals are not matching. </P></BODY></HTML> Thu, 26 Sep 2013 10:55:01 GMT https://live.paloaltonetworks.com/t5/general-topics/about-vpn-error-log/m-p/14341#M10534 harshanatarajan 2013-09-26T10:55:01Z Re: About vpn error log https://live.paloaltonetworks.com/t5/general-topics/about-vpn-error-log/m-p/14342#M10535 <HTML><HEAD></HEAD><BODY><P>Phase1 failing possibly due to traffic being Natted. Check your policies for any address translation between the two gateways.</P></BODY></HTML> Thu, 26 Sep 2013 14:05:08 GMT https://live.paloaltonetworks.com/t5/general-topics/about-vpn-error-log/m-p/14342#M10535 gswcowboy 2013-09-26T14:05:08Z Re: About vpn error log https://live.paloaltonetworks.com/t5/general-topics/about-vpn-error-log/m-p/14343#M10536 <HTML><HEAD></HEAD><BODY><P>Hi, </P><P><BR />I&nbsp; searched for the error on google and found the following </P><P><A href="https://supportforums.cisco.com/thread/2059585">https://supportforums.cisco.com/thread/2059585</A></P><P>It seems like when the setup is not correct you get the error you mentioned.</P><P>Hope this helps.</P><P>Thank you</P><P>Numan</P></BODY></HTML> Mon, 30 Sep 2013 17:06:37 GMT https://live.paloaltonetworks.com/t5/general-topics/about-vpn-error-log/m-p/14343#M10536 mbutt 2013-09-30T17:06:37Z Re: About vpn error log https://live.paloaltonetworks.com/t5/general-topics/about-vpn-error-log/m-p/14344#M10537 <HTML><HEAD></HEAD><BODY><P>This indicates mismatch with remote site.</P><P>Check proposals for IKE and IPSec. Make sure traffic is not NATed.</P><P>If you are using cisco at remote end, select DH-group 'no-pfs' for the proposal.</P><P></P><P>If tunnel is up and working, these messages may be during the negotiation.</P></BODY></HTML> Tue, 01 Oct 2013 01:38:44 GMT https://live.paloaltonetworks.com/t5/general-topics/about-vpn-error-log/m-p/14344#M10537 ukhapre 2013-10-01T01:38:44Z