Hi

tried to setup a netopia dsl router but it was not quite working.
I put a Netgear firewall behind the netopia and got a little father. I
got phase 1 up and not phase 2 and I got messages on the BM IKE sceen.
So much closer.

A couple quick question AH or ESP?

I think the mail issue is that the wan side of the netgear is 10.10.1.2
and I have the netopia mapping a 75.28.120.89 to that. So I think the
netgear is sending the BM some info that does not match. Not sure how to
make the netopia let the Netgear take the wan IP over. Would that be
bridging? When I tried that was not able to access the internet.

I am guesing I should get a DSL VPN router. The Netopia does IKE but I
don't believe it lets me do protected networks and that is why I failed
when I set it up with BM.

Any thoughts?
Ike log below.

Thanks,

Will



3-12-2008 5:47:10 pm ***Receive Aggressive Mode message from 75.28.120.89
3-12-2008 5:47:10 pm
I-COOKIE=1D1ECC2AE22DD0CA,R-COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=-1898738164
3-12-2008 5:47:10 pm Start IKE-SA 90E33100 -
Responder,src=68.21.158.113,dst=75.28.120.89,TotSA =1
3-12-2008 5:47:10 pm AUTH ALG IS 1
3-12-2008 5:47:10 pm Warn :Proposal mismatch PHASE 1 HASH Algorithm
mismatch mine : SHA his : MD5 dst : 75.28.120.89 src :
68.21.158.113 cookies[mine :his] CAF64711DDEB1343 : 1D1ECC2A00000004
3-12-2008 5:47:10 pm Warn :Proposal mismatch PHASE 1 DH Group mismatch
mine : 1 his : 2 dst : 75.28.120.89 src : 68.21.158.113
cookies[mine :his] CAF64711DDEB1343 : 1D1ECC2A00000010
3-12-2008 5:47:10 pm IKE SA NEGOTIATION: Peer lifetime = 86400 My
lifetime=3600
3-12-2008 5:47:10 pm ****DH private exponent size is 1016****
3-12-2008 5:47:10 pm Local server's interfaces : 10.30.1.2
3-12-2008 5:47:10 pm Local server's interfaces : 68.21.158.113
3-12-2008 5:47:10 pm Recieved MM ID payload type 1 protocol 0 portnum 0
length 8
3-12-2008 5:47:10 pm *Received MM ID ID_IPV4_ADDR 10.10.1.2
3-12-2008 5:47:10 pm *Sending MM id payload IPSEC_ID_IPV4_ADDR
68.21.158.113
3-12-2008 5:47:10 pm *protocol 0 portnum 0 length 8
3-12-2008 5:47:10 pm ***Send Aggressive Mode message to 75.28.120.89
3-12-2008 5:47:10 pm
I-COOKIE=1D1ECC2AE22DD0CA,R-COOKIE=CAF64711DDEB1343,MsgID=0,1stPL=SA-PAYLOAD,state=-1898738164
3-12-2008 5:47:13 pm ***Receive Aggressive Mode message from 75.28.120.89
3-12-2008 5:47:13 pm
I-COOKIE=1D1ECC2AE22DD0CA,R-COOKIE=CAF64711DDEB1343,MsgID=0,1stPL=HASH-PAYLOAD,state=-1898738052
3-12-2008 5:47:13 pm IKE : Not an NMAS user use default traffic rule
3-12-2008 5:47:13 pm Final IKE (phase 1) SA lifetime is 86400 secs
3-12-2008 5:47:13 pm IKE-SA is created. rekey time = 64800
encr=5,hash=1,auth=1,lifesec=86400
3-12-2008 5:47:13 pm dst=75.28.120.89,time=29536
3-12-2008 5:47:13 pm ***Receive Quick Mode message from 75.28.120.89
3-12-2008 5:47:13 pm
I-COOKIE=1D1ECC2AE22DD0CA,R-COOKIE=CAF64711DDEB1343,MsgID=F6E40B94,1stPL=HASH-PAYLOAD,state=-1898738052
3-12-2008 5:47:13 pm Start IPSEC SA 8ED4B280 - Responder****totSA=1
3-12-2008 5:47:13 pm AG MODE : Responder Ready to receive encrypted IKE
packets
3-12-2008 5:47:13 pm ****DH private exponent size is 1016****
3-12-2008 5:47:13 pm Received (QM) proxy ID 10.31.1.0 255.255.255.0 -
10.30.0.0 255.255.0.0
3-12-2008 5:47:13 pm Warn :Proposal mismatch Quick Mode : ESP -
transform mismatch mine : esp des his : esp 3des dst : 75.28.120.89
src : 68.21.158.113 cookies[his :mine] CAF64711DDEB1343 :
1D1ECC2A90E332D6
3-12-2008 5:47:13 pm sending notify message type: 14 to 75.28.120.89
3-12-2008 5:47:13 pm ***Send Unacknowledge Informational message to
75.28.120.89
3-12-2008 5:47:13 pm
I-COOKIE=1D1ECC2AE22DD0CA,R-COOKIE=CAF64711DDEB1343,MsgID=A2B64057,1stPL=HASH-PAYLOAD,state=-1898738052
3-12-2008 5:47:13 pm Processed SA-PAYLOAD unsuccessful - No proposal
chosen for quick mode, dst=75.28.120.89.
3-12-2008 5:47:13 pm Failed to create protoSA - No proposal chosen for
quick mode 75.28.120.89
3-12-2008 5:50:25 pm ***Receive Unacknowledge Informational message from
75.28.120.89
3-12-2008 5:50:25 pm
I-COOKIE=1D1ECC2AE22DD0CA,R-COOKIE=CAF64711DDEB1343,MsgID=BD0F9D55,1stPL=HASH-PAYLOAD,state=-1898738052
3-12-2008 5:50:25 pm recieved isakmp sa delete msg from 75.28.120.89
cookies are 1D1ECC2AE22DD0CA : CAF64711DDEB1343