About vpn error log

panos · ‎09-26-2013

Hi,

What does "received unencrypted Notify payload(INVALID COOKIE) from IP ...to ... ignored " mean ?

Thanks.

harshanatarajan · ‎09-26-2013

Probably the proposals are not matching.

gswcowboy · ‎09-26-2013

Phase1 failing possibly due to traffic being Natted. Check your policies for any address translation between the two gateways.

mbutt · ‎09-30-2013

Hi,

I searched for the error on google and found the following

It seems like when the setup is not correct you get the error you mentioned.

Hope this helps.

Thank you

Numan

ukhapre · ‎09-30-2013

This indicates mismatch with remote site.

Check proposals for IKE and IPSec. Make sure traffic is not NATed.

If you are using cisco at remote end, select DH-group 'no-pfs' for the proposal.

If tunnel is up and working, these messages may be during the negotiation.