I think I finally found out which Phase 2 parameter doesn't match, causing the Meraki MX to keep sending NO_PROPOSAL_CHOSEN back to Oracle.  Oracle Support told me this:   If using GCM, no authentication algorithm is required because authentication is included with GCM encryption. However, Meraki does not have AES-256-GCM for phase 2 encryption, so an authentication algorithm is required. The following options are supported:   - HMAC-SHA-256-128 (recommended) - HMAC-SHA1-128   But the cryptographic technique HMAC is absent for Meraki as well.The messages like   set ikev1 error <14> received and ignored notification payload: NO_PROPOSAL_CHOSEN   will come up whenever the Phase 2 is reached.   I must find a solution and cannot just replace our newly purchased MX250.  Oracle has a list of "Verified CPE Devices" which include Fortinet, and we have a spare Fortigate 60F.   Any concerns with putting the 60F behind the MX250 and trying to establish the VPN connection between Oracle and the 60F? ... View more

Hi, reviving this thread as I need to set up a site-to-site VPN from my Meraki MX250 with a business partner using Oracle Cloud.  I'm looking for assistance with the Meraki IPSec settings to make this work?  Oracle lists them below, but I'm thinking someone has some real-world experience or advice?  Thanks in advance!   https://docs.oracle.com/en-us/iaas/Content/Network/Reference/supportedIPsecparams.htm#Supported_IPSec_Parameters ... View more