[Vpn-help] Problem importing pcf file

[Matthew Grooms]

David Perrault wrote:
> Thanks all - I've now managed to import my profiles successfully.
> However none of my profiles work despites being ok with the Cisco VPN
> client or NCP Secure Entry.
> 
> With an ESP-IPsec profile I get the following error in the IKE log:-
> 
> 09/08/16 07:48:34 !! : phase1 id mismatch
> 09/08/16 07:48:34 !! : received = ipv4-host 152.62.108.70
> 09/08/16 07:48:34 !! : expected = none
> 
> With a Multi-User TCP profile I get:-
> 09/08/16 08:12:20 !! : unable to connect to pfkey interface
> 
> I also see from time to time in the IPsec log:-
> 09/08/16 08:15:18 !! : ARP packet has invalid header
> 

Hi David,

This is the other bug that has been reported, fixed and will be included 
in RC3 :) When the Authentication / Remote Identity is set to Any in the 
site configuration, the client will sometimes fail negotiations with 
"phase1 id mismatch". As a temporary work-around for your connection, 
you will need to set it to address since thats what your gateway sends.

Hope this helps,

-Matthew