ISAKMP Policies supported by Win7

来源：互联网发布：哪里看opta数据编辑：程序博客网时间：2024/06/01 13:25

Sep 15 12:00:36.589: ISAKMP:(0):Checking ISAKMP transform 1 against priority 5 policy
Sep 15 12:00:36.589: ISAKMP:      encryption AES-CBC
Sep 15 12:00:36.589: ISAKMP:      keylength of 256
Sep 15 12:00:36.589: ISAKMP:      hash SHA
Sep 15 12:00:36.589: ISAKMP:      unknown DH group 20
Sep 15 12:00:36.589: ISAKMP:      auth pre-share
Sep 15 12:00:36.589: ISAKMP:      life type in seconds
Sep 15 12:00:36.589: ISAKMP:      life duration (VPI) of 0x0 0x0 0x70 0x80
Sep 15 12:00:36.589: ISAKMP:(0):Diffie-Hellman group offered does not match policy!
Sep 15 12:00:36.589: ISAKMP:(0):atts are not acceptable. Next payload is 3
Sep 15 12:00:36.589: ISAKMP:(0):Checking ISAKMP transform 2 against priority 5 policy
Sep 15 12:00:36.589: ISAKMP:      encryption AES-CBC
Sep 15 12:00:36.589: ISAKMP:      keylength of 128
Sep 15 12:00:36.589: ISAKMP:      hash SHA
Sep 15 12:00:36.589: ISAKMP:      unknown DH group 19
Sep 15 12:00:36.589: ISAKMP:      auth pre-share
Sep 15 12:00:36.589: ISAKMP:      life type in seconds
Sep 15 12:00:36.593: ISAKMP:      life duration (VPI) of 0x0 0x0 0x70 0x80
Sep 15 12:00:36.593: ISAKMP:(0):Proposed key length does not match policy
Sep 15 12:00:36.593: ISAKMP:(0):atts are not acceptable. Next payload is 3
Sep 15 12:00:36.593: ISAKMP:(0):Checking ISAKMP transform 3 against priority 5 policy
Sep 15 12:00:36.593: ISAKMP:      encryption AES-CBC
Sep 15 12:00:36.593: ISAKMP:      keylength of 256
Sep 15 12:00:36.593: ISAKMP:      hash SHA
Sep 15 12:00:36.593: ISAKMP:      unknown DH group 14
Sep 15 12:00:36.593: ISAKMP:      auth pre-share
Sep 15 12:00:36.593: ISAKMP:      life type in seconds
Sep 15 12:00:36.593: ISAKMP:      life duration (VPI) of 0x0 0x0 0x70 0x80
Sep 15 12:00:36.593: ISAKMP:(0):Diffie-Hellman group offered does not match policy!
Sep 15 12:00:36.593: ISAKMP:(0):atts are not acceptable. Next payload is 3
Sep 15 12:00:36.593: ISAKMP:(0):Checking ISAKMP transform 4 against priority 5 policy
Sep 15 12:00:36.593: ISAKMP:      encryption 3DES-CBC
Sep 15 12:00:36.593: ISAKMP:      hash SHA
Sep 15 12:00:36.593: ISAKMP:      unknown DH group 14
Sep 15 12:00:36.593: ISAKMP:      auth pre-share
Sep 15 12:00:36.593: ISAKMP:      life type in seconds
Sep 15 12:00:36.593: ISAKMP:      life duration (VPI) of 0x0 0x0 0x70 0x80
Sep 15 12:00:36.593: ISAKMP:(0):Encryption algorithm offered does not match policy!
Sep 15 12:00:36.593: ISAKMP:(0):atts are not acceptable. Next payload is 3
Sep 15 12:00:36.593: ISAKMP:(0):Checking ISAKMP transform 5 against priority 5 policy
Sep 15 12:00:36.593: ISAKMP:      encryption 3DES-CBC
Sep 15 12:00:36.593: ISAKMP:      hash SHA
Sep 15 12:00:36.593: ISAKMP:      default group 2
Sep 15 12:00:36.593: ISAKMP:      auth pre-share
Sep 15 12:00:36.593: ISAKMP:      life type in seconds
Sep 15 12:00:36.593: ISAKMP:      life duration (VPI) of 0x0 0x0 0x70 0x80
Sep 15 12:00:36.593: ISAKMP:(0):Encryption algorithm offered does not match policy!
Sep 15 12:00:36.593: ISAKMP:(0):atts are not acceptable. Next payload is 0

On some platforms of Cisco Routers, only the last policy (green) is acceptable.

Beacuse the IOS only support DH Group 1, 2 and 5.