How to troubleshoot the message "no proposal chosen" when it appeares in event logs?
![Zyxel_Emily](https://us.v-cdn.net/6029482/uploads/defaultavatar/nN4PAQRO7TCNP.jpg)
![](https://us.v-cdn.net/6029482/uploads/userpics/FN0BI9T10CTX/n6O940IZ5DEW6.png)
![Sixth Anniversary](https://us.v-cdn.net/6029482/uploads/badges/WVWKILF3S3LD.png)
![1000 Comments](https://us.v-cdn.net/6029482/uploads/badges/50AUPOMRSR6S.png)
![100 Answers](https://us.v-cdn.net/6029482/uploads/badges/64OW7WFEOGRW.png)
![Zyxel Certified Sales Associate](https://us.v-cdn.net/6029482/uploads/badges/T8OIUCS56TCY.png)
Question:
How to troubleshoot the message "no proposal chosen" when it appeares in event logs?
Answer:
Site-to-Site VPN (Both sites are Nebula firewalls)
On nebula, there is no configuration for phase 1 and phase 2 proposal in Site-to-Site VPN. You can check phase 1 and phase 2 proposal using command via SSH.
[ATP/FLEX] How to check the phase 1 and phase 2 proporal of Site-to-Site VPN?
Site-to-Site VPN (Non-Nebula VPN peers)
Click IPSec policy > Default. Verify Phase 1 and Phase 2 Settings. Ensure both sides use the same encryption, hash algorithms, Diffie-Hellman group for key exchange and PFS settings.
Remote access VPN
Go to ADVANCED OPTIONS > Policy > Default. Verify Phase 1 and Phase 2 Settings. Ensure the VPN client supports the encryption, hash algorithms, Diffie-Hellman group for key exchange and PFS settings.
Best regards,
Emily
Don't miss this great chance to upgrade your Nebula org. For free!
Categories
- All Categories
- 414 Beta Program
- 2.2K Nebula
- 130 Nebula Ideas
- 88 Nebula Status and Incidents
- 5.4K Security
- 166 USG FLEX H Series
- 255 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 999 Wireless
- 36 Wireless Ideas
- 6.2K Consumer Product
- 233 Service & License
- 370 News and Release
- 77 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.9K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 69 Security Highlight