First of all, thank you both for taking the time to respond. The issue did indeed end up being a parameter other than lifesize being mismatched. I had not turned on ike debugging on the PAN and so the messages I was seeing in the log while correct, didn't necessarily correspond to each other. Once I enabled detailed debugging I could see what the actual mismatch was which ended up being the hash setting for the phase 2 connection. Moral of the story here...even though you're seeing log entries for phase 1 and phase 2 negotiation, if you don't turn on debug for ike, you're not getting the full story. Again, thank you both very much.
... View more