topic Re: No proposal chosen ikev1 in General Topics

No proposal chosen ikev1

Esameldin — Sun, 23 Aug 2026 10:43:31 GMT

After upgrading to panos preffered version 12.1.7-h3 my ikev1 ipsec tunnel with ipsec crypto md5,3des,nopfs is not coming up , knowing that ike phase 1 is successful but ike phase 2 is giving no proposal chosen error , the algorithms matches the other peer and i tried downgrading the tunnel came up, i would appreciate any help

Re: No proposal chosen ikev1

reaper — Mon, 24 Aug 2026 11:08:48 GMT

Is there a reason you're using these deprecated protocols?

Unless your peer device is something ancient, it would be better to switch to modern crypto profiles and see if that not automatically fixes your issue

Re: No proposal chosen ikev1

Esameldin — Mon, 24 Aug 2026 11:19:56 GMT

We are forced to use these old algorithms as the peer seems like a very old device. cisco i believe.

Re: No proposal chosen ikev1

reaper — Mon, 24 Aug 2026 11:38:47 GMT

that is very unfortunate!

I've heard of this issue before on PAN-OS 12, maybe a bug or a QA oversight due to the sheer age of these protocols. You could open up a support case to have that investigated, but i would recommend trying to upgrade the crypto profile.