<?xml version="1.0" encoding="UTF-8"?>

<rss version="2.0" xmlns:blogChannel="http://backend.userland.com/blogChannelModule">

<channel>
<title>Cisco forum - dslreports.com community</title>
<link>http://www.dslreports.com/forum/equip,cis</link>
<description>Cisco forum current topics</description>
<language>en</language>
<copyright>Copyright 2007, dslreports.com</copyright>
<pubDate>Wed, 09 Jul 2008 10:00:00 EDT</pubDate>
<lastBuildDate>Wed, 09 Jul 2008 10:00:00 EDT</lastBuildDate>

<image>
<title>dslreports.com</title>
<url>http://i.dslr.net/bbrdisc1.gif</url>
<link>http://www.dslreports.com</link>
<width>19</width>
<height>18</height>
<description>bbr disc</description>
</image>

<item>
<title>[Config] configuration</title>
<link>http://www.dslreports.com/forum/remark,20763301</link>
<description><![CDATA[Hi i am new here . i would like to learn configuration of ADSL in Cisco Router 850/870 Series so can any one teach me Setp by Setp . with explanasion that what command i used and for what i used that command. i am waiting for reply thanks.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,20763301</guid>
<pubDate>2008-07-09 09:58:19</pubDate>
</item>

<item>
<title>[HELP] Confreg Issues</title>
<link>http://www.dslreports.com/forum/remark,20762963</link>
<description><![CDATA[I forgot the password to my 1841 cisco series router so I used the CRTL+BREAK option, so that I can bypass the password but when I got to the Rommon prompt I typed in just 0x21 and just then I remembered the password so I rebooted the router, am not sure if I pressed ENTER on the keyboard before restarting the router.

The issue right now is that when I tried restarting the router it was just some funny shapes that were showing on y hyperterminal. I need help asap.

thanks]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,20762963</guid>
<pubDate>2008-07-09 08:38:17</pubDate>
</item>

<item>
<title>[Config] Client VPN problems on Cisco 1720</title>
<link>http://www.dslreports.com/forum/remark,20760708</link>
<description><![CDATA[I've been working on this for several days now and feel I'm not any closer to a solution.  I have a site which has been running a client VPN for years without trouble suddenly can no longer function.  They hadn't tried it in a while, but soon before they reported it we did add a new NAT overload and they had been upgraded to IOS 12.4 19 (they since have been brought back down again.  

Any help would be appreciated.  Here is the config (edited for IPs keys and passwords), the version, and the log (edited for IPs)
!&#012;version 12.3&#012;service timestamps debug uptime&#012;service timestamps log uptime&#012;service password-encryption&#012;!&#012;hostname ##########&#012;!&#012;boot-start-marker&#012;boot-end-marker&#012;!&#012;logging buffered 8840 debugging&#012;enable secret level 6 5 ##############&#012;enable secret 5 ########################&#012;enable password 7 #######################&#012;!&#012;mmi polling-interval 60&#012;no mmi auto-configure&#012;no mmi pvc&#012;mmi snmp-timeout 180&#012;aaa new-model&#012;!&#012;!&#012;aaa authentication login userauthen local&#012;aaa authentication login telnet local&#012;aaa authorization network groupauthor local&#012;aaa session-id common&#012;ip subnet-zero&#012;!&#012;!&#012;ip dhcp excluded-address 192.168.230.1 192.168.230.99&#012;!&#012;ip dhcp pool 1&#012;   network 192.168.230.0 255.255.255.0&#012;   default-router 192.168.230.1&#012;   dns-server 198.6.1.122 198.6.1.142&#012;!&#012;ip cef&#012;ip inspect max-incomplete high 1100&#012;ip inspect one-minute high 1100&#012;ip inspect name FastEthernet_0 tcp&#012;ip inspect name FastEthernet_0 udp&#012;ip inspect name FastEthernet_0 cuseeme&#012;ip inspect name FastEthernet_0 h323&#012;ip inspect name FastEthernet_0 rcmd&#012;ip inspect name FastEthernet_0 realaudio&#012;ip inspect name FastEthernet_0 smtp&#012;ip inspect name FastEthernet_0 streamworks&#012;ip inspect name FastEthernet_0 vdolive&#012;ip inspect name FastEthernet_0 sqlnet&#012;ip inspect name FastEthernet_0 tftp&#012;ip inspect name FastEthernet_0 ftp&#012;ip audit po max-events 100&#012;!&#012;!&#012;username rivetek password 7 ##########&#012;username dis privilege 6 password 7 ##########&#012;username folcomer password 7 ##########&#012;!&#012;!&#012;!&#012;!&#012;crypto isakmp policy 1&#012; encr 3des&#012; hash md5&#012; authentication pre-share&#012; group 2&#012; lifetime 43200&#012;!&#012;crypto isakmp policy 3&#012; encr 3des&#012; authentication pre-share&#012; group 2&#012;!&#012;crypto isakmp policy 10&#012; encr 3des&#012; hash md5&#012; authentication pre-share&#012; group 2&#012;crypto isakmp key #################### address ########## no-xauth&#012;crypto isakmp key #################### address ########## no-xauth&#012;crypto isakmp key #################### address ########## no-xauth&#012;crypto isakmp key #################### address ########## no-xauth&#012;crypto isakmp key #################### address ########## no-xauth&#012;crypto isakmp key #################### address ######### no-xauth&#012;!&#012;crypto isakmp client configuration group VPNclient&#012; key folco123&#012; dns 198.6.1.122&#012; pool ippool&#012; acl 199&#012;!&#012;!&#012;crypto ipsec transform-set to_uppermarlboro esp-3des esp-md5-hmac&#012;crypto ipsec transform-set to_greenwood esp-3des esp-md5-hmac&#012;crypto ipsec transform-set to_baltimore esp-3des esp-md5-hmac&#012;crypto ipsec transform-set to_vlink esp-3des esp-md5-hmac&#012;crypto ipsec transform-set to_frederick esp-3des esp-md5-hmac&#012;!&#012;crypto dynamic-map dynmap 10&#012; set transform-set to_greenwood&#012;!&#012;!&#012;crypto map cm-cryptomap local-address Serial0.1&#012;crypto map cm-cryptomap client authentication list userauthen&#012;crypto map cm-cryptomap isakmp authorization list groupauthor&#012;crypto map cm-cryptomap client configuration address respond&#012;crypto map cm-cryptomap 3 ipsec-isakmp&#012; set peer ##########&#012; set transform-set to_baltimore&#012; match address 103&#012;crypto map cm-cryptomap 4 ipsec-isakmp&#012; set peer ##########&#012; set transform-set to_frederick&#012; match address 104&#012;crypto map cm-cryptomap 5 ipsec-isakmp&#012; set peer ##########&#012; set transform-set to_uppermarlboro&#012; match address 105&#012;crypto map cm-cryptomap 7 ipsec-isakmp&#012; set peer ##########&#012; set transform-set to_greenwood&#012; match address 107&#012;crypto map cm-cryptomap 10 ipsec-isakmp dynamic dynmap&#012;crypto map cm-cryptomap 11 ipsec-isakmp&#012; set peer ##########&#012; set transform-set to_vlink&#012; match address 111&#012;!&#012;!&#012;!&#012;interface FastEthernet0&#012; description connected to EthernetLAN&#012; ip address 10.1.149.1 255.255.255.0 secondary&#012; ip address 192.168.230.1 255.255.255.0&#012; ip access-group 100 in&#012; ip nat inside&#012; ip inspect FastEthernet_0 in&#012; speed auto&#012;!&#012;interface Serial0&#012; description TI Internet Verizon Circuit ID (wcomw0r67540)&#012; bandwidth 1536&#012; no ip address&#012; encapsulation frame-relay IETF&#012; service-module t1 timeslots 1-24&#012; frame-relay lmi-type ansi&#012;!&#012;interface Serial0.1 point-to-point&#012; description connected to Internet&#012; bandwidth 1536&#012; ip address ########## 255.255.255.240&#012; ip nat outside&#012; frame-relay interface-dlci 500 IETF&#012; crypto map cm-cryptomap&#012;!&#012;ip local pool ippool 10.10.10.1 10.10.10.254&#012;ip nat inside source route-map nonat interface Serial0.1 overload&#012;ip nat inside source static tcp 10.1.149.2 21 interface Serial0.1 21&#012;ip nat inside source static tcp 10.1.149.2 20 interface Serial0.1 20&#012;ip nat inside source static 192.168.230.4 ##########&#012;ip classless&#012;ip route 0.0.0.0 0.0.0.0 Serial0.1&#012;no ip http server&#012;no ip http secure-server&#012;!&#012;!&#012;access-list 1 permit 192.168.230.0 0.0.0.255&#012;access-list 100 permit ip any any&#012;access-list 102 permit icmp any any&#012;access-list 102 permit esp any any&#012;access-list 102 permit udp any any eq isakmp&#012;access-list 102 permit ip 192.168.232.0 0.0.0.255 any&#012;access-list 102 permit ip 192.168.233.0 0.0.0.255 any&#012;access-list 102 permit ip ########## 0.0.0.7 any&#012;access-list 102 permit ip ########## 0.0.0.7 any&#012;access-list 102 permit ip 10.10.10.0 0.0.0.255 any&#012;access-list 102 permit ip 192.168.234.0 0.0.0.255 any&#012;access-list 102 permit ip ########## 0.0.0.7 any&#012;access-list 102 permit ip 192.168.231.0 0.0.0.255 any&#012;access-list 102 permit ip 192.168.202.0 0.0.0.15 any&#012;access-list 102 permit udp any any eq non500-isakmp&#012;access-list 102 permit tcp host 63.240.122.161 host ########## eq ftp&#012;access-list 102 permit tcp host 65.127.84.74 host ########## eq ftp&#012;access-list 102 permit tcp 216.57.222.128 0.0.0.127 host ########## eq ftp&#012;access-list 102 permit ip 216.57.222.128 0.0.0.127 any&#012;access-list 103 permit ip 192.168.230.0 0.0.0.255 192.168.231.0 0.0.0.255&#012;access-list 104 permit ip 192.168.230.0 0.0.0.255 192.168.234.0 0.0.0.255&#012;access-list 105 permit ip 192.168.230.0 0.0.0.255 192.168.232.0 0.0.0.255&#012;access-list 107 permit ip 192.168.230.0 0.0.0.255 192.168.233.0 0.0.0.255&#012;access-list 110 deny   ip 10.1.149.0 0.0.0.255 192.168.202.0 0.0.0.15&#012;access-list 110 deny   ip 192.168.230.0 0.0.0.255 10.10.10.0 0.0.0.255&#012;access-list 110 deny   ip 192.168.230.0 0.0.0.255 192.168.231.0 0.0.0.255&#012;access-list 110 deny   ip 192.168.230.0 0.0.0.255 192.168.232.0 0.0.0.255&#012;access-list 110 deny   ip 192.168.230.0 0.0.0.255 192.168.233.0 0.0.0.255&#012;access-list 110 deny   ip 192.168.230.0 0.0.0.255 192.168.234.0 0.0.0.255&#012;access-list 110 permit ip 192.168.230.0 0.0.0.255 any&#012;access-list 111 permit ip 10.1.149.0 0.0.0.255 192.168.202.0 0.0.0.15&#012;access-list 199 permit ip 192.168.230.0 0.0.0.255 10.10.10.0 0.0.0.255&#012;!&#012;route-map nonat permit 10&#012; match ip address 110&#012;!&#012;snmp-server community rivetmon RO&#012;snmp-server contact Rivetek,360-715-1220,Support@########.com&#012;!&#012;privilege exec level 6 show startup-config&#012;privilege exec level 6 show&#012;!&#012;line con 0&#012; exec-timeout 0 0&#012; password 7 05190F1924584B02&#012;line aux 0&#012;line vty 0 4&#012; login authentication telnet&#012;!&#012;end&#012;............................................................&#012;Cisco Internetwork Operating System Software&#012;IOS (tm) C1700 Software (C1700-K9O3SY7-M), Version 12.3(26), RELEASE SOFTWARE (fc2)&#012;Technical Support: http://www.cisco.com/techsupport&#012;Copyright (c) 1986-2008 by cisco Systems, Inc.&#012;Compiled Mon 17-Mar-08 14:24 by dchih&#012; &#012;ROM: System Bootstrap, Version 12.2(7r)XM2, RELEASE SOFTWARE (fc1)&#012; &#012;########## uptime is 1 hour, 34 minutes&#012;System returned to ROM by reload&#012;System image file is "flash:c1700-k9o3sy7-mz.123-26.bin"&#012; &#012;This product contains cryptographic features and is subject to United&#012;States and local country laws governing import, export, transfer and&#012;use. Delivery of Cisco cryptographic products does not imply&#012;third-party authority to import, export, distribute or use encryption.&#012;Importers, exporters, distributors and users are responsible for&#012;compliance with U.S. and local country laws. By using this product you&#012;agree to comply with applicable laws and regulations. If you are unable&#012;to comply with U.S. and local laws, return this product immediately.&#012; &#012;A summary of U.S. laws governing Cisco cryptographic products may be found at:&#012;http://www.cisco.com/wwl/export/crypto/tool/stqrg.html&#012; &#012;If you require further assistance please contact us by sending email to&#012;export@cisco.com.&#012; &#012;cisco 1721 (MPC860P) processor (revision 0x500) with 83711K/14593K bytes of memory.&#012;Processor board ID FOC10283PE2 (1057174431), with hardware revision 0000&#012;MPC860P processor: part number 5, mask 2&#012;Bridging software.&#012;X.25 software, Version 3.0.0.&#012;1 FastEthernet/IEEE 802.3 interface(s)&#012;1 Serial network interface(s)&#012;1 Virtual Private Network (VPN) Module(s)&#012;WIC T1-DSU&#012;32K bytes of non-volatile configuration memory.&#012;32768K bytes of processor board System flash (Read/Write)&#012; &#012;Configuration register is 0x2102&#012; &#012;...........................................................&#012; &#012;=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2008.07.08 16:04:08 =~=~=~=~=~=~=~=~=~=~=~=&#012;01:27:05: ISAKMP (0:0): received packet from ####.####.####.250 dport 500 sport 500 Global (N) NEW SA&#012;01:27:05: ISAKMP: Created a peer struct for ####.####.####.250, peer port 500&#012;01:27:05: ISAKMP: Locking peer struct 0x821E1110, IKE refcount 1 for Responding to new initiation&#012;01:27:05: ISAKMP: local port 500, remote port 500&#012;01:27:05: ISAKMP: insert sa successfully sa = 821E29F8&#012;01:27:05: ISAKMP (0:4): processing SA payload. message ID = 0&#012;01:27:05: ISAKMP (0:4): processing ID payload. message ID = 0&#012;01:27:05: ISAKMP (0:4): ID payload &#012;next-payload : 13&#012;type         : 11 &#012;group id     : VPNclient &#012;protocol     : 17 &#012;port         : 500 &#012;length       : 17&#012;01:27:05: ISAKMP (0:4): peer matches *none* of the profiles&#012;01:27:05: ISAKMP (0:4): processing vendor id payload&#012;01:27:05: ISAKMP (0:4): vendor ID seems Unity/DPD but major 215 mismatch&#012;01:27:05: ISAKMP (0:4): vendor ID is XAUTH&#012;01:27:05: ISAKMP (0:4): processing vendor id payload&#012;01:27:05: ISAKMP (0:4): vendor ID is DPD&#012;01:27:05: ISAKMP (0:4): processing vendor id payload&#012;01:27:05: ISAKMP (0:4): vendor ID seems Unity/DPD but major 123 mismatch&#012;01:27:05: ISAKMP (0:4): vendor ID is NAT-T v2&#012;01:27:05: ISAKMP (0:4): processing vendor id payload&#012;01:27:05: ISAKMP (0:4): vendor ID seems Unity/DPD but major 194 mismatch&#012;01:27:05: ISAKMP (0:4): processing vendor id payload&#012;01:27:05: ISAKMP (0:4): vendor ID is Unity&#012;01:27:05: ISAKMP : Scanning profiles for xauth ...&#012;01:27:05: ISAKMP (0:4): Checking ISAKMP transform 1 against priority 1 policy&#012;01:27:05: ISAKMP:      encryption AES-CBC&#012;01:27:05: ISAKMP:      hash SHA&#012;01:27:05: ISAKMP:      default group 2&#012;01:27:05: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:05: ISAKMP:      life type in seconds&#012;01:27:05: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:05: ISAKMP:      keylength of 256&#012;01:27:05: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:05: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:05: ISAKMP (0:4): Checking ISAKMP transform 2 against priority 1 policy&#012;01:27:05: ISAKMP:      encryption AES-CBC&#012;01:27:05: ISAKMP:      hash MD5&#012;01:27:05: ISAKMP:      default group 2&#012;01:27:05: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:05: ISAKMP:      life type in seconds&#012;01:27:05: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:05: ISAKMP:      keylength of 256&#012;01:27:05: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:05: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:05: ISAKMP (0:4): Checking ISAKMP transform 3 against priority 1 policy&#012;01:27:05: ISAKMP:      encryption AES-CBC&#012;01:27:05: ISAKMP:      hash SHA&#012;01:27:05: ISAKMP:      default group 2&#012;01:27:05: ISAKMP:      auth pre-share&#012;01:27:05: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 256&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 4 against priority 1 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 256&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 5 against priority 1 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 6 against priority 1 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 7 against priority 1 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 8 against priority 1 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 9 against priority 1 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Hash algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 10 against priority 1 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Xauth authentication by pre-shared key offered but does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 11 against priority 1 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Hash algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 12 against priority 1 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Preshared authentication offered but does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 13 against priority 1 policy&#012;01:27:06: ISAKMP:      encryption DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 14 against priority 1 policy&#012;01:27:06: ISAKMP:      encryption DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 0&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 1 against priority 3 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 256&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 2 against priority 3 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 256&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 3 against priority 3 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 256&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 4 against priority 3 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 256&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 5 against priority 3 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 6 against priority 3 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 7 against priority 3 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 8 against priority 3 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 9 against priority 3 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Xauth authentication by pre-shared key offered but does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 10 against priority 3 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Hash algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 11 against priority 3 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Preshared authentication offered but does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 12 against priority 3 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Hash algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 13 against priority 3 policy&#012;01:27:06: ISAKMP:      encryption DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 14 against priority 3 policy&#012;01:27:06: ISAKMP:      encryption DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 0&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 1 against priority 10 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 256&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 2 against priority 10 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 256&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 3 against priority 10 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 256&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 4 against priority 10 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 256&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 5 against priority 10 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 6 against priority 10 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 7 against priority 10 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 8 against priority 10 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 9 against priority 10 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Hash algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 10 against priority 10 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Xauth authentication by pre-shared key offered but does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 11 against priority 10 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Hash algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 12 against priority 10 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Preshared authentication offered but does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 13 against priority 10 policy&#012;01:27:06: ISAKMP:      encryption DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 14 against priority 10 policy&#012;01:27:06: ISAKMP:      encryption DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 0&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 1 against priority 65535 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 256&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 2 against priority 65535 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 256&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 3 against priority 65535 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 256&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 4 against priority 65535 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 256&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 5 against priority 65535 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 6 against priority 65535 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 7 against priority 65535 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 8 against priority 65535 policy&#012;01:27:06: ISAKMP:      encryption AES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP:      keylength of 128&#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 9 against priority 65535 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 10 against priority 65535 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 11 against priority 65535 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash SHA&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 12 against priority 65535 policy&#012;01:27:06: ISAKMP:      encryption 3DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Encryption algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 13 against priority 65535 policy&#012;01:27:06: ISAKMP:      encryption DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth XAUTHInitPreShared&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Hash algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 3&#012;01:27:06: ISAKMP (0:4): Checking ISAKMP transform 14 against priority 65535 policy&#012;01:27:06: ISAKMP:      encryption DES-CBC&#012;01:27:06: ISAKMP:      hash MD5&#012;01:27:06: ISAKMP:      default group 2&#012;01:27:06: ISAKMP:      auth pre-share&#012;01:27:06: ISAKMP:      life type in seconds&#012;01:27:06: ISAKMP:      life duration (VPI) of  0x0 0x20 0xC4 0x9B &#012;01:27:06: ISAKMP (0:4): Hash algorithm offered does not match policy!&#012;01:27:06: ISAKMP (0:4): atts are not acceptable. Next payload is 0&#012;01:27:06: ISAKMP (0:4): no offers accepted!&#012;01:27:06: ISAKMP (0:4): phase 1 SA policy not acceptable! (local ####.####.####.81 remote ####.####.####.250)&#012;01:27:06: ISAKMP (0:4): incrementing error counter on sa, attempt 1 of 5: construct_fail_ag_init&#012;01:27:06: ISAKMP (0:4): Unknown Input IKE_MESG_FROM_PEER, IKE_AM_EXCH:  state = IKE_READY&#012;01:27:06: ISAKMP (0:4): Input = IKE_MESG_FROM_PEER, IKE_AM_EXCH&#012;01:27:06: ISAKMP (0:4): Old State = IKE_READY  New State = IKE_READY &#012; &#012;01:27:06: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Aggressive mode failed with peer at ####.####.####.250  &#012;01:27:11: ISAKMP (0:4): received packet from ####.####.####.250 dport 500 sport 500 Global (R) AG_NO_STATE&#012;01:27:11: ISAKMP (0:4): phase 1 packet is a duplicate of a previous packet.&#012;01:27:11: ISAKMP (0:4): retransmitting due to retransmit phase 1&#012;01:27:11: ISAKMP (0:4): retransmitting phase 1 AG_NO_STATE...&#012;01:27:11: ISAKMP (0:4): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1&#012;01:27:11: ISAKMP (0:4): retransmitting phase 1 AG_NO_STATE&#012;01:27:11: ISAKMP (0:4): sending packet to ####.####.####.250 my_port 500 peer_port 500 (R) AG_NO_STATE&#012;01:27:16: ISAKMP (0:4): received packet from ####.####.####.250 dport 500 sport 500 Global (R) AG_NO_STATE&#012;01:27:16: ISAKMP (0:4): phase 1 packet is a duplicate of a previous packet.&#012;01:27:16: ISAKMP (0:4): retransmitting due to retransmit phase 1&#012;01:27:16: ISAKMP (0:4): no outgoing phase 1 packet to retransmit. AG_NO_STATE&#012;01:27:21: ISAKMP (0:4): received packet from ####.####.####.250 dport 500 sport 500 Global (R) AG_NO_STATE&#012;01:27:21: ISAKMP (0:4): phase 1 packet is a duplicate of a previous packet.&#012;01:27:21: ISAKMP (0:4): retransmitting due to retransmit phase 1&#012;01:27:21: ISAKMP (0:4): no outgoing phase 1 packet to retransmit. AG_NO_STATE&#012;
Please let me know if there is anything else that might assist in your assistance.

Thank you,
Conn
]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,20760708</guid>
<pubDate>2008-07-08 19:16:41</pubDate>
</item>

<item>
<title>[Config] bitorrent with cisco router 2611</title>
<link>http://www.dslreports.com/forum/remark,20756103</link>
<description><![CDATA[I am currently learning cisco stuffs. so please dont mind.

i have cisco router 2611 and use bit torrent. Ports have been forwarded and i m able to use bit torrent. its pretty damn good. now i m trying to optimize the NAT table values.
this is what i got in config

ip nat translation timeout 3600 (2400?)
ip nat translation tcp-timeout 3600  (900?)
ip nat translation udp-timeout 1200   (600?)
ip nat translation dns-timeout 300
ip nat translation icmp-timeout 120
ip nat translation max-entries 2000

let me know if this is the best setting for BT.

thanks ]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,20756103</guid>
<pubDate>2008-07-07 21:54:44</pubDate>
</item>

<item>
<title>[Config] Silly problem with ping on 851</title>
<link>http://www.dslreports.com/forum/remark,20759000</link>
<description><![CDATA[I'm unable to ping my router fm the Internet, but I thought I had the icmp echo-reply enabled in myACL for FA4 (my WAN port)

Here is my FA4 config

interface FastEthernet4&#012; description Outside WAN$FW_OUTSIDE$&#012; mac-address 0018.012f.0a95&#012; ip ddns update hostname borland.no-ip.info&#012; ip ddns update myupdate&#012; ip address dhcp client-id FastEthernet4&#012; ip access-group 107 in&#012; no ip redirects&#012; no ip unreachables&#012; no ip proxy-arp&#012; ip inspect SDM_LOW out&#012; ip nat outside&#012; ip virtual-reassembly&#012; ip route-cache flow&#012; duplex auto&#012; speed auto&#012; no cdp enable&#012;
and here is mt ACL 107 that is applied to FA4

access-list 107 remark auto generated by SDM firewall configuration&#012;access-list 107 remark SDM_ACL Category=1&#012;access-list 107 permit tcp any any eq 27000&#012;access-list 107 permit tcp any any eq ftp&#012;access-list 107 permit tcp any any eq ftp-data&#012;access-list 107 deny   ip 192.168.0.0 0.0.0.255 any&#012;access-list 107 permit udp any eq bootps any eq bootpc&#012;access-list 107 permit icmp any any echo-reply&#012;access-list 107 permit icmp any any time-exceeded&#012;access-list 107 permit icmp any any unreachable&#012;access-list 107 deny   ip 10.0.0.0 0.255.255.255 any&#012;access-list 107 deny   ip 172.16.0.0 0.15.255.255 any&#012;access-list 107 deny   ip 192.168.0.0 0.0.255.255 any&#012;access-list 107 deny   ip 127.0.0.0 0.255.255.255 any&#012;access-list 107 deny   ip host 255.255.255.255 any&#012;access-list 107 deny   ip any any log&#012;
What am I missing? (Keep in mind that a good portion of the ACL is a mystery to me)
]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,20759000</guid>
<pubDate>2008-07-08 14:02:11</pubDate>
</item>

<item>
<title>Inserted a new WIC, need command</title>
<link>http://www.dslreports.com/forum/remark,20755889</link>
<description><![CDATA[I just inserted a new dual port WIC for a new P2P. Current config doesn't auto recognize. what command do i type in to be able to see these new intefaces?]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,20755889</guid>
<pubDate>2008-07-07 21:05:19</pubDate>
</item>

<item>
<title>Cat6500 Memory Issue</title>
<link>http://www.dslreports.com/forum/remark,20695426</link>
<description><![CDATA[I've run across something goofy, looking for a little insight.

In my DC, I have a pair of Cat6506's, Sup2/MFSC2s. Each has a 6066 SLB module, and a 48 port gig card. The pair has been up and running for about a year and a half, no problems to speak of. The primary traffic path is through the first chassis. The second is redundant, for maintenance, failover, shit like that. Both chassis are running 12.2(18)SXD7b.

Last week, RANCID started yelling at me that it couldn't grab configs on the first chassis. I found out I indeed couldn't telnet in, and logging showed memory fragmentation errors with EXEC failure messages. Console attempts gave me low memory, come back later messages. The chassis was still passing traffic just fine; I just couldn't get in to see what was going on. 

This morning, I manually swung traffic over to the second chassis. I still was unable to console in, and had to unseat the GigE card to restore console access. After digging around a bit, I found some oddities with processor memory that I can't get a handle on.

First, I saw an abnormally small number in the largest free memory block.
#sh memory allocating-process totals&#012;               Head    Total(b)     Used(b)     Free(b)   Lowest(b)  Largest(b)&#012;Processor   42CF14C0   422636352   398927608    23708744    23165096      206512&#012;     I/O    8000000    67109648    12978976    54130672    54130672    53372280&#012;
Checking process memory, my dead processes were off the charts.

Total: 489745216, Used: 411759304, Free: 77985912&#012;PID TTY  Allocated      Freed    Holding    Getbufs    Retbufs Process&#012;  0   0   52432160    6921784   42338928          0          0 *Init*          &#012;  0   0       3128 2592134320       3128          0          0 *Sched*        &#012;  0   0          0          0          0          0          0 *Neutrino*      &#012;   0   0 3097752440  394219144  352253704   12214668          0 *Dead*          &#012;  1   0       4680       4680       8416          0          0 Chunk Manager  &#012;  2   0        192        192       3856          0          0 Load Meter      &#012;  3   0  150809640    9866784       6856          0          0 TACACS+        &#012;  4   0          0      21632       6856          0          0 Check heaps    &#012;  5   0  890465088  890460800    1225992 3703894320 3703891776 Pool Manager  &#012;
Looking further at the dead memory..

#sh memory dead totals&#012;               Head    Total(b)     Used(b)     Free(b)   Lowest(b)  Largest(b)&#012;Processor   42CF14C0   422636352   398928728    23707624    23165096      206512&#012;     I/O    8000000    67109704    12979032    54130672    54130672    53372280&#012;        &#012; &#012;Dead Proc Summary for: Processor&#012; &#012;   PC          Total  Name&#012;0x40616148      47426  Parser-Mode History Table&#012;0x4036AE38      33871  Watched Boolea&#012;0x40EEAE20        549  Virtual Exec&#012;0x40615FE4        286  Virtual Exec&#012;0x40ECB180        163  Virtual Exec&#012;0x408E3A14         88  Virtual Exec&#012;0x40307420         81  Virtual Exec&#012;0x408DC600         77  SLB_LAM_REAL_SERVER&#012;0x40AE546C         73  IFINDEX hw subblock&#012;0x40A2CD98         60  QM-SB&#012;0x40EEB148         49  Virtual Exec&#012;0x408D8400         46  SLB module real&#012;0x408DA338         44  SLB Vserver&#012;0x4064CCEC         42  IfIdx Table Entry&#012;0x40EEAE20         39  draco-oir-process:slot 1&#012;0x4013A9EC         36  CEF: IDB namestring&#012;0x4025CA34         32  AAA Server handle&#012;0x407D63A8         27  DSS-SB&#012;...&#012;...&#012;...&#012;
When I compare this to the other chassis, the Parser-Mode History Table and Watched Boolean processes aren't nearly as high, nor are they as large a percentage of the total.

Am I looking at a 'simple' memory leak here? There's no software advisory up on this IOS, so I didn't want to just assume that. Any thoughts?
]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,20695426</guid>
<pubDate>2008-06-25 04:47:13</pubDate>
</item>

<item>
<title>[CCNA] What would be the best lab?</title>
<link>http://www.dslreports.com/forum/remark,20734420</link>
<description><![CDATA[Which switch/routers to use? The company I work for will provide me the needed hardware, so I won't go for simulation software and budget isn't a limitation.

I did read on the subject, mostly Wendell Odom but found myself still searching for answers: 3 or 4 switches/routers, what basic setup? what interfaces to look for? what hardware could be reused for CCNP?
--
Conservatives define themselves in terms of what they oppose.
---George Will]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,20734420</guid>
<pubDate>2008-07-02 21:49:41</pubDate>
</item>

<item>
<title>[Info] Inspection &#x26;amp; performance</title>
<link>http://www.dslreports.com/forum/remark,20731637</link>
<description><![CDATA[Hi,

I'm trying to boost my router's performance and I had a question on how much the IP inspection affecte performance and secondly how useful it is.

Here is the inspection section from my config:

ip cef&#012;ip inspect log drop-pkt&#012;ip inspect name SDM_LOW cuseeme&#012;ip inspect name SDM_LOW dns&#012;ip inspect name SDM_LOW ftp&#012;ip inspect name SDM_LOW h323&#012;ip inspect name SDM_LOW icmp&#012;ip inspect name SDM_LOW imap&#012;ip inspect name SDM_LOW pop3&#012;ip inspect name SDM_LOW rcmd&#012;ip inspect name SDM_LOW realaudio&#012;ip inspect name SDM_LOW rtsp&#012;ip inspect name SDM_LOW esmtp&#012;ip inspect name SDM_LOW sqlnet&#012;ip inspect name SDM_LOW streamworks&#012;ip inspect name SDM_LOW tftp&#012;ip inspect name SDM_LOW tcp&#012;ip inspect name SDM_LOW udp&#012;ip inspect name SDM_LOW vdolive&#012;no ip bootp server&#012;]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,20731637</guid>
<pubDate>2008-07-02 13:15:16</pubDate>
</item>

<item>
<title>Cisco 878</title>
<link>http://www.dslreports.com/forum/remark,20740879</link>
<description><![CDATA[Hi there.I am quite new to cisco, therefore this silly question. I've been given a CISCO 878 router and I would like to use with my Cable internet connection (Virgin UK), which means to be conneted to my cable modem. Anyone knows if this might work and if, advise how?? I'am able to do some basic config, but what would be the encapsulation type on cable?

There are 4LANs, 1 ISDN S/T, and G.SHDSL ports on the cisco.

Thanks all in advance]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,20740879</guid>
<pubDate>2008-07-04 10:16:56</pubDate>
</item>

</channel>
</rss>
