Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Tony0727
Tony0727
New here
Member since Apr 12, 2020
Apr 13 2020
Community Record
5
Posts
0
Kudos
0
Solutions
Badges
Apr 12 2020
2:14 PM
Correct. And I am able to get the Mikrotik to connect just fine as long as 3DES is enabled. But like I said in my original post I am trying to get an IP phone connected to the client VPN but it appears to only be using AES and I dont see an option to change that on the phone. So I am wondering if there is a way to change the client VPN to use AES instead.
... View more
Apr 12 2020
1:50 PM
I am running 14.40. I am able to connect my windows device and a Mikrotik router. On my Mikrotik if I set the Enc Algorith to just AES then I get the same result on the Meraki with no connection. This is the event log: Non-Meraki / Client VPN negotiation msg: phase1 negotiation failed. Non-Meraki / Client VPN negotiation msg: failed to pre-process ph1 packet (side: 1, status 1). Non-Meraki / Client VPN negotiation msg: failed to get valid proposal. Non-Meraki / Client VPN negotiation msg: no suitable proposal found. This is the packet capture: 20:46:18.436486 IP (tos 0x20, ttl 58, id 0, offset 0, flags [DF], proto UDP (17), length 465) XXXXXXXXXXXX.500 > XXXXXXXXXXXXX.500: [udp sum ok] isakmp 1.0 msgid 00000000 cookie 2ba7e236e92b62b7->0000000000000000: phase 1 I agg: (sa: doi=ipsec situation=identity (p: #0 protoid=isakmp transform=2 (t: #1 id=ike (type=enc value=aes)(type=keylen value=0080)(type=hash value=sha2-256)(type=group desc value=modp1536)(type=auth value=preshared)(type=lifetype value=sec)(type=lifeduration value=7080)) (t: #2 id=ike (type=enc value=aes)(type=keylen value=0080)(type=hash value=sha1)(type=group desc value=modp1536)(type=auth value=preshared)(type=lifetype value=sec)(type=lifeduration value=7080)))) (ke: key len=192 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX) (nonce: n len=32 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX) (id: idtype=FQDN protoid=0 port=0 len=5 XXXXX) (vid: len=8 XXXXXXXXXXXXXXXXX) (vid: len=16 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX) (vid: len=16 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX) (vid: len=16 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX)
... View more
Apr 12 2020
10:05 AM
Hello, I may be trying to do the impossible, but I am attempting to connect an IP phone through the client VPN. It seems to be getting stuck on Phase 1 using AES instead of 3DES. Is there any way to make the client VPN use AES for phase 1 instead?
... View more
© 2024 Cisco Systems, Inc.
