We help IT Professionals succeed at work.

Error between Cisco 871 and ASA 5505

Mawallace
Mawallace asked
on
When site a connects to site b, I see the  message below during Phase 1.

I have tried to figure out what it means, but with no success.

Could someone help, please?

Config files are below

Error message:-
Local4.Notice      210.0.0.100      %ASA-5-713904: IP = 83.104.158.217, Received encrypted packet with no matching SA, dropping
Local4.Notice      210.0.0.100      %ASA-5-713257: Phase 1 failure:  Mismatched attribute types for class Group Description:  Rcv'd: Group 1  Cfg'd: Group 2
Local4.Notice      210.0.0.100      %ASA-5-713257: Phase 1 failure:  Mismatched attribute types for class Group Description:  Rcv'd: Group 1  Cfg'd: Group 2
Local4.Notice      210.0.0.100      %ASA-5-713257: Phase 1 failure:  Mismatched attribute types for class Group Description:  Rcv'd: Group 1  Cfg'd: Group 2
Local4.Notice      210.0.0.100      %ASA-5-713257: Phase 1 failure:  Mismatched attribute types for class Group Description:  Rcv'd: Group 1  Cfg'd: Group 2
Local4.Notice      210.0.0.100      %ASA-5-713257: Phase 1 failure:  Mismatched attribute types for class Group Description:  Rcv'd: Group 1  Cfg'd: Group 2
Local4.Notice      210.0.0.100      %ASA-5-713257: Phase 1 failure:  Mismatched attribute types for class Group Description:  Rcv'd: Group 1  Cfg'd: Group 2
Local4.Notice      210.0.0.100      %ASA-5-713257: Phase 1 failure:  Mismatched attribute types for class Group Description:  Rcv'd: Group 1  Cfg'd: Group 2
Local4.Notice      210.0.0.100      %ASA-5-713257: Phase 1 failure:  Mismatched attribute types for class Group Description:  Rcv'd: Group 1  Cfg'd: Group 2
Local4.Notice      210.0.0.100      %ASA-5-713119: Group = 83.104.158.217, IP = 83.104.158.217, PHASE 1 COMPLETED




siteb.txt
configsita.txt
Comment
Watch Question

Les MooreSr. Systems Engineer
Top Expert 2008

Commented:
>set pfs group2
I think the ASA will default to pfs group 1
IT Director
Commented:
Either that or in the ASA config make sure it is using the proper group at first glance it looked exactly like what it says tiy have PFS set not PFS 2

Author

Commented:
I have set this tp PFS Grpup 2 - and still problem occurs - I think it is something that the 871 does - but I will not be at that site to run debug for a few week So I will leave feed back then