Hi,
I am having some trouble setting up an IPSec VPN between a Vigor 3900 and V3300, the error that I seem to be encountering in the logs is:
1 14:55:31 09/23 isakmp informational packet, type:PAYLOAD_MALFORMED
2 14:55:31 09/23 informational payload, type:PAYLOAD_MALFORMED
3 14:55:31 09/23 receive ISAKMP packet: src:{213.1.251.2}, dst:{213.235.62.142}, MsgID:{0x33b525b1}, Ci:{BE AE 38 FB 63 30 A0 4F}, Cr:{EA C6 DD 29 08 B2 A9 11}
4 14:55:31 09/23 {2_3900}:sent MI3, expecting MR3.
5 14:55:31 09/23 {2_3900}:emitting initial contact payload
6 14:55:31 09/23 NAT-Traversal: Result using RFC 3947 (NAT-Traversal): no NAT detected
7 14:55:31 09/23 {2_3900}:receive MainR2
8 14:55:31 09/23 receive ISAKMP packet: src:{213.1.251.2}, dst:{213.235.62.142}, MsgID:{0x00000000}, Ci:{BE AE 38 FB 63 30 A0 4F}, Cr:{EA C6 DD 29 08 B2 A9 11}
9 14:55:31 09/23 {2_3900}:sent MI2, expecting MR2.
10 14:55:31 09/23 {2_3900}:receive MainR1
11 14:55:31 09/23 received Vendor ID payload [RFC 3947]
12 14:55:31 09/23 received Vendor ID payload [Dead Peer Detection]
13 14:55:31 09/23 ignoring Vendor ID payload [4f457d7854605075...]
14 14:55:31 09/23 receive ISAKMP packet: src:{213.1.251.2}, dst:{213.235.62.142}, MsgID:{0x00000000}, Ci:{BE AE 38 FB 63 30 A0 4F}, Cr:{EA C6 DD 29 08 B2 A9 11}
15 14:55:31 09/23 {2_3900}:send ISAKMP MainI1
Which I believe is an issue with the proposals at each end not matching, as the preshared key for both profiles is the same. Please find posted below links for the proposals on each of the routers. Any help would be greatly appreciated.