cisco vpn client error - no proposal chosen

[marsmann]

Hello all,

great forum. I'm a newbie to this site.

I have a Cisco PIX 506 (6.0) that I do manual IPSec vpn with. We changed providers recently, so I changed the external IP address to the new address, but now my vpn clients won't connect.

We use the Cisco Secure (SafeNet) 1.1 3des client. The users have changed their clients to point to the new IP address, but it fails on Phase 2 stating "no proposal chosen", but nothing else has changed. Is there anything I need to change in my crypto or isakmp commands as a result of the IP address change? I don't see any need to change anything....

thanks in advance.

 

[espIKEkid]

mmmm does your new provider block any ports that you might need?

ntl blocks ports except for leased and isdn lines?
what does the log say in the client? and pix?

your crypto client statment.. does it have 0.0.0.0 or specific ip addresses?

Regards
Jonathan