Не удается поднять IPSec между DFL-1500 и 3COM VPN
D-LINK пишет
238 2006-05-25 09:02:00 INFO ISAKMP-SA established A.A.A.A:500-B.B.B.B:500
239 2006-05-25 09:02:02 INFO responde new phase 2 negotiation
240 2006-05-25 09:02:02 ERROR Failed to get sainfo.
241 2006-05-25 09:02:02 ERROR Failed to get sainfo.
242 2006-05-25 09:02:02 ERROR Failed to pre-process Packet.
3COM у себя рисует
May 25 09:37:51 localhost kernel: IKE: IKE --Start Phase 1 negotiation with peer А.А.А.А
May 25 09:37:51 localhost kernel: IKE: IKE -- RemoteGateway ID: IPV4_ADDR--А.А.А.А PresharedKey:XXXXXXXX
May 25 09:37:51 localhost kernel: IKE: IKE -- Protocol -- PROTO_ISAKMP
May 25 09:37:51 localhost kernel: IKE: IKE -- Transform -- KEY_IKE
May 25 09:37:51 localhost kernel: IKE: IKE -- Encryption -- DES_CBC
May 25 09:37:51 localhost kernel: IKE: IKE -- Hash -- MD5_HASH
May 25 09:37:51 localhost kernel: IKE: IKE -- My ID: IPV4_ADDR--B.B.B.B PresharedKey:XXXXXXXX
May 25 09:37:51 localhost kernel: IKE: IKE -- Authentication -- PRESHARED_KEY
May 25 09:37:51 localhost kernel: IKE: IKE -- LifeType -- SECONDS
May 25 09:37:51 localhost kernel: IKE: IKE -- LifeDuration -- 600
May 25 09:37:51 localhost kernel: IKE: IKE -- GroupDescription -- MODP_768
May 25 09:37:51 localhost kernel: IKE: IKE -- MainMode Exchange Selected
May 25 09:37:51 localhost kernel: IKE: IKE -- MainMode -- initiator sent out message1 to A.A.A.A, port 500->500.
May 25 09:37:51 localhost kernel: IKE: IKE -- MainMode -- initiator received response message1 from A.A.A.A, port 500->500.
May 25 09:37:51 localhost kernel: IKE: IKE -- Proposal 1 -- protocol PROTO_ISAKMP, with 1 transforms
May 25 09:37:51 localhost kernel: IKE: IKE -- Transform 1 -- KEY_IKE, index = 1
May 25 09:37:51 localhost kernel: IKE: IKE -- Encryption -- DES_CBC
May 25 09:37:51 localhost kernel: IKE: IKE -- Hash -- MD5_HASH
May 25 09:37:51 localhost kernel: IKE: IKE -- Authentication -- PRESHARED_KEY
May 25 09:37:51 localhost kernel: IKE: IKE -- GroupDescription -- MODP_768
May 25 09:37:51 localhost kernel: IKE: IKE -- LifeType -- SECONDS
May 25 09:37:51 localhost kernel: IKE: IKE -- LifeDuration -- 600
May 25 09:37:51 localhost kernel: IKE: IKE -- MainMode -- initiator sent out message2 to A.A.A.A, port 500->500.
May 25 09:37:51 localhost kernel: IKE: IKE -- MainMode -- initiator received response message2 from A.A.A.A, port 500->500.
May 25 09:37:51 localhost kernel: IKE: IKE -- My ID in payload: IPV4_ADDR--B.B.B.B
May 25 09:37:51 localhost kernel: IKE: IKE -- MainMode -- initiator sent out message3 to A.A.A.A, port 500->500.
May 25 09:37:51 localhost kernel: IKE: IKE -- MainMode -- initiator received response message3 from A.A.A.A, port 500->500.
May 25 09:37:51 localhost kernel: IKE: IKE -- RemoteGateway ID in payload: IPV4_ADDR--A.A.A.A ProtocolID:17 Port:500
May 25 09:37:51 localhost kernel: IKE: IKE -- RemoteGateway ID: IPV4_ADDR--A.A.A.A ProtocolID:17 Port:500 PresharedKey:XXXXXXXX
May 25 09:37:51 localhost kernel: IKE: IKE -- My ID: IPV4_ADDR--B.B.B.B PresharedKey:XXXXXXXX
May 25 09:37:51 localhost kernel: IKE: IKE --Phase 1 negotiation succeeded with A.A.A.A
May 25 09:37:53 localhost kernel: IKE: IKE --Start Phase 2 negotiation with peer A.A.A.A
May 25 09:37:53 localhost kernel: IKE: IKE -- RemoteHost ID: IPV4_ADDR_SUBNET--192.168.2.0/255.255.255.0
May 25 09:37:53 localhost kernel: IKE: IKE -- Source ID: IPV4_ADDR_SUBNET--192.168.8.0/255.255.255.0
May 25 09:37:53 localhost kernel: IKE: IKE -- Protocol -- PROTO_IPSEC_ESP, Number of transforms -- 1
May 25 09:37:53 localhost kernel: IKE: IKE -- Transform -- ESP_DES
May 25 09:37:53 localhost kernel: IKE: IKE -- Authentication -- HMAC_MD5
May 25 09:37:53 localhost kernel: IKE: IKE -- LifeType -- SECONDS
May 25 09:37:53 localhost kernel: IKE: IKE -- LifeDuration -- 600
May 25 09:37:53 localhost kernel: IKE: IKE -- EncapsulationMode -- TUNNEL
Notification NO_PROPOSAL_CHOSEN (0xE) received from peer A.A.A.A

Ошибка во второй фазе установки соединения.
Не совпадают методы шифрования.
240 2006-05-25 09:02:02 ERROR Failed to get sainfo.
241 2006-05-25 09:02:02 ERROR Failed to get sainfo.
Не может получить параметры Security Accociations
Notification NO_PROPOSAL_CHOSEN (0xE) received from peer A.A.A.A
А это как раз сообщение о несовпадении методов шифрования

Спасибо. В обоих устройствах использовался DES MD5 DH1. В настройках 3COM установил
Use Perfect Forward Secrecy
Use IKE Keep-Alive
все заработало.