Router User Manual

Nortel Secure Router 8000 Series
Troubleshooting - VAS 2 IPSec and IKE troubleshooting
Issue 01.01 (30 March 2009) Nortel Networks Inc. 2-61
To remove this fault, you need to check whether ACLs on two ends are mutually mirroring. If
not, modify them.
got NOTIFY of type NO_PROPOSAL_CHOSEN
or
drop message from 202.38.162.1 due to notification type NO_PROPOSAL_CHOSEN
The preceding display indicates that proposals on two negotiation ends do not match each
other. Check whether:
z
There are IKE proposals matching each other in Phase 1 negotiation.
z
IPSec parameters are configured.
z
The encapsulation protocols and authentication and encryption algorithms match each
other in Phase 2 negotiation.