Hello All,

After following numerous resource articles on the net i can not seem to get
a proper vpn connection with my remote dlink DI-804HV. there seems to be a
problem with IKE and i have pasted an excerpt from the log file. any
suggestions are appreciated.

BM38sp3 -> establishing site to site with dlink DI-804HV

4-28-2005 11:00:15 am Read trusted root cert file
SYS:/ETC/IKE/ROOTCERT/S2S001.DER
4-28-2005 11:00:15 am Read trusted root cert file
SYS:/ETC/IKE/ROOTCERT/S2S002.DER
4-28-2005 11:00:15 am Read trusted root cert file
SYS:/ETC/IKE/ROOTCERT/SRV001.DER
4-28-2005 11:00:15 am Read trusted root cert file
SYS:/ETC/IKE/ROOTCERT/SRV002.DER
4-28-2005 11:00:26 am Read trusted root cert file
SYS:/ETC/IKE/ROOTCERT/S2S001.DER
4-28-2005 11:00:26 am Read trusted root cert file
SYS:/ETC/IKE/ROOTCERT/S2S002.DER
4-28-2005 11:00:26 am Read trusted root cert file
SYS:/ETC/IKE/ROOTCERT/SRV001.DER
4-28-2005 11:00:26 am Read trusted root cert file
SYS:/ETC/IKE/ROOTCERT/SRV002.DER
4-28-2005 11:02:42 am Start IPSEC SA 6842E120 - Initiator****totSA=1
4-28-2005 11:02:42 am src from IPsec
4-28-2005 11:02:42 am 10020000 42A5CA42
4-28-2005 11:02:42 am dst from IPsec
4-28-2005 11:02:42 am 10020000 CC70C759
4-28-2005 11:02:42 am Start IKE-SA 63926000 -
Initiator,src=66.165.202.66,dst=204.112.199.89,Tot SA=1
4-28-2005 11:02:42 am ***Send Main Mode message to 204.112.199.89
4-28-2005 11:02:42 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=1850516232
4-28-2005 11:02:43 am ***Receive Main Mode message from 204.112.199.89
4-28-2005 11:02:43 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=0,1stPL=SA-PAYLOAD,state=1850516232
4-28-2005 11:02:43 am Warn :Proposal mismatch PHASE 1 DH Group mismatch
mine : 2 his : 1 dst : 204.112.199.89 src : 66.165.202.66
cookies[mine :his] 2277A81AEF578D6C : A550BA3F639261D6
4-28-2005 11:02:43 am IKE SA NEGOTIATION: Peer lifetime = 28800 My
lifetime=28800
4-28-2005 11:02:43 am ****DH private exponent size is 760****
4-28-2005 11:02:43 am Local server's interfaces : 192.168.1.1
4-28-2005 11:02:43 am Local server's interfaces : 66.165.202.66
4-28-2005 11:02:43 am ***Send Main Mode message to 204.112.199.89
4-28-2005 11:02:43 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=0,1stPL=KEY-PAYLOAD,state=1850516284
4-28-2005 11:02:43 am ***Receive Main Mode message from 204.112.199.89
4-28-2005 11:02:43 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=0,1stPL=KEY-PAYLOAD,state=1850516284
4-28-2005 11:02:43 am *Sending MM id payload IPSEC_ID_IPV4_ADDR
66.165.202.66
4-28-2005 11:02:43 am *protocol 0 portnum 0 length 8
4-28-2005 11:02:43 am Sending INITIAL_CONTACT notify to 204.112.199.89
4-28-2005 11:02:43 am ***Send Main Mode message to 204.112.199.89
4-28-2005 11:02:43 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=0,1stPL=ID-PAYLOAD,state=1850516296
4-28-2005 11:02:43 am ***Receive Main Mode message from 204.112.199.89
4-28-2005 11:02:43 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=0,1stPL=ID-PAYLOAD,state=1850516296
4-28-2005 11:02:43 am Recieved MM ID payload type 1 protocol 0 portnum 0
length 8
4-28-2005 11:02:43 am *Received MM ID ID_IPV4_ADDR 204.112.199.89
4-28-2005 11:02:43 am IKE : Not an NMAS user use default traffic rule
4-28-2005 11:02:43 am Final IKE (phase 1) SA lifetime is 28800 secs
4-28-2005 11:02:43 am IKE-SA is created. rekey time = 27360
encr=5,hash=2,auth=1,lifesec=28800
4-28-2005 11:02:43 am dst=204.112.199.89,time=1209009
4-28-2005 11:02:43 am *Sending proxy ID type 4 192.168.1.0/255.255.255.0
4-28-2005 11:02:43 am *Sending proxy ID type 4 192.168.0.0/255.255.255.0
4-28-2005 11:02:43 am ***Send Quick Mode message to 204.112.199.89
4-28-2005 11:02:43 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=3DFA458D,1stPL=HASH-PAYLOAD,state=1850516344
4-28-2005 11:02:47 am ***Send Quick Mode message to 204.112.199.89
4-28-2005 11:02:47 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=3DFA458D,1stPL=HASH-PAYLOAD,state=1850516344
4-28-2005 11:02:54 am ***Send Quick Mode message to 204.112.199.89
4-28-2005 11:02:54 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=3DFA458D,1stPL=HASH-PAYLOAD,state=1850516344
4-28-2005 11:02:58 am Start IPSEC SA 6842E480 - Initiator****totSA=2
4-28-2005 11:02:58 am src from IPsec
4-28-2005 11:02:58 am 10020000 42A5CA42
4-28-2005 11:02:58 am dst from IPsec
4-28-2005 11:02:58 am 10020000 CC70C759
4-28-2005 11:02:58 am *Sending proxy ID type 4 192.168.1.0/255.255.255.0
4-28-2005 11:02:58 am *Sending proxy ID type 4 192.168.0.0/255.255.255.0
4-28-2005 11:02:58 am ***Send Quick Mode message to 204.112.199.89
4-28-2005 11:02:58 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=9405CD6D,1stPL=HASH-PAYLOAD,state=1850516344
4-28-2005 11:03:03 am ***Send Quick Mode message to 204.112.199.89
4-28-2005 11:03:03 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=9405CD6D,1stPL=HASH-PAYLOAD,state=1850516344
4-28-2005 11:03:04 am ***Send Quick Mode message to 204.112.199.89
4-28-2005 11:03:04 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=3DFA458D,1stPL=HASH-PAYLOAD,state=1850516344
4-28-2005 11:03:10 am ***Send Quick Mode message to 204.112.199.89
4-28-2005 11:03:10 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=9405CD6D,1stPL=HASH-PAYLOAD,state=1850516344
4-28-2005 11:03:14 am Start IPSEC SA 6842E360 - Initiator****totSA=3
4-28-2005 11:03:14 am src from IPsec
4-28-2005 11:03:14 am 10020000 42A5CA42
4-28-2005 11:03:14 am dst from IPsec
4-28-2005 11:03:14 am 10020000 CC70C759
4-28-2005 11:03:14 am *Sending proxy ID type 4 192.168.1.0/255.255.255.0
4-28-2005 11:03:14 am *Sending proxy ID type 4 192.168.0.0/255.255.255.0
4-28-2005 11:03:14 am ***Send Quick Mode message to 204.112.199.89
4-28-2005 11:03:14 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=8CF08FF7,1stPL=HASH-PAYLOAD,state=1850516344
4-28-2005 11:03:18 am ***Send Quick Mode message to 204.112.199.89
4-28-2005 11:03:18 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=8CF08FF7,1stPL=HASH-PAYLOAD,state=1850516344
4-28-2005 11:03:18 am IKEQMTimeoutHandler: Packet retransmit exceeded the
limit! the SA will be deleted
4-28-2005 11:03:19 am ***Send Quick Mode message to 204.112.199.89
4-28-2005 11:03:19 am
I-COOKIE=2277A81AEF578D6C,R-COOKIE=A550BA3F9618CF1F,MsgID=9405CD6D,1stPL=HASH-PAYLOAD,state=1850516344
4-28-2005 11:03:22 am IKE-SA 63926000 is
Deleted,I-COOKIE=2277A81A,R-COOKIE=A550BA3F,dst=204.112.199.89
4-28-2005 11:03:22 am State:3 Cond:4 TimerEvent:3
4-28-2005 11:03:22 am lifetime :28800 sec Rekey Time :27360 sec
4-28-2005 11:03:22 am Created at :67167 sec Remaining life time :28760
sec Current time 67207