Cyberoam Knowledge Base

Most Popular Articles

Most Helpful Articles


Advanced Search

Table of Contents

. . . . . . . . . . . . .

Knowledge Base Information

Product Literature

Best Practices & Policies

Protect Your Cyberoam Appliances from Power Fluctuations

Cyberoam Maintenance

TroubleShooting

Logs and Reports

Cyberoam Authentication for Thin Clients

Clientless Single Sign On

The network traffic fails over to a VPN Link when the primary MPLS Link goes down. But, failback to the MPLS Link is not taking

I have configured an MPLS Link as backup to VPN Link. Although my VPN link is up, the traffic passes through the MPLS Link. Why?

Failover to a VPN Link when the primary MPLS Link goes down is not working. What do I do?

Error <MPPE required but peer refused>

Error <MPPE required but peer negotiation failed>

Error <we require PFS but Quick I1 SA specifies no GROUP_DESCRIPTION>

Error << security layer encountered a problem >>

Error <<Connection already exists>>

Error << issuer cacert not found >>

Error << certificate was revoked >>

Error <<X.509 certificate is not valid until <date> >>

Error << cannot respond to IPsec SA request because no connection is known >>

Error <<Cannot respond to IPsec SA request because no connection is known>>

Error << peer requested 604800 seconds which exceeds our limit 86400 seconds. Attribute OAKLEY_LIFE_DURATION (variable length)>

Error << Signature check (on @client1.elitecore.com) failed (wrong key?); tried *AwEAAbc0R >>

Error << peer is NATed >>

Error << INVALID_KEY_INFORMATION >>

Error << probable authentication failure (mismatch of preshared secrets?): malformed payload in packet>>

Error <<policy does not allow Extended Authentication(XAUTH) with RSA of initiator(we are responder).

Error << Oakley Transform [OAKLEY_3DES_CBC (192), OAKLEY_MD5, OAKLEY_GROUP_MODP1024] refused due to strict flag >>

Error << policy mandates Extended Authentication (XAUTH) with RSA of initiator (we are responder).

Error << no GROUP_DESCRIPTION>> error

Error <<policy does not allow OAKLEY_PRESHARED_KEY authentication. >> error

Error << policy does not allow OAKLEY_RSA_SIG authentication. >> error

Error << mismatch of preshared secrets >>

Product Technical Support

Cyberoam Virtual UTM

Endpoint Data Protection

Cyberoam SSL VPN

Cyberoam Central Console

Cyberoam's On-Cloud Management Service

Email This Article

Print

Print Current Article and All Sub-Articles

Error << Oakley Transform [OAKLEY_3DES_CBC (192), OAKLEY_MD5, OAKLEY_GROUP_MODP1024] refused due to strict flag >>

Problem Synopsis:	Not able to establish connection.
Cause:	Phase 1 parameters configuration mismatch. Encryption Algorithm, Authentication Algorithm and/or DH Group (phase 1) specified at the local end does not match with the one specified at the remote end
Resolution:	To establish the connection successfully, same configuration is required at both the ends. Update the configuration and try to establish the connection again.
Sample Log:	Apr 28 12:38:20 1146208100 pluto[18126]: "rw_psk_1-1"[1] 188.7.7.1 #11: Oakley Transform [OAKLEY_3DES_CBC (192), OAKLEY_MD5, OAKLEY_GROUP_MODP1024] refused due to strict flag Apr 28 12:38:20 1146208100 pluto[18126]: "rw_psk_1-1"[1] 188.7.7.1 #11: no acceptable Oakley Transform Apr 28 12:38:20 1146208100 pluto[18126]: "rw_psk_1-1"[1] 188.7.7.1 #11: sending notification NO_PROPOSAL_CHOSEN to 188.7.7.1:500

Article ID: 1908