以下に、PFS 不一致エラー ログを示します。

NSX Edge

PFS はフェーズ 2 の一部としてネゴシエートされます。PFS が一致しない場合、フェーズ 2 がマッチしないで説明されている失敗ケースと類似の反応を示します。 

000 #4: "s1-c1":500 STATE_QUICK_I1 (sent QI1, expecting 
      QR1); EVENT_RETRANSMIT in 8s; lastdpd=-1s(seq in:0 out:0); 
      idle; import:admin initiate
Aug 26 12:35:52 weiqing-desktop ipsec[7312]: | got payload 0x800
      (ISAKMP_NEXT_N) needed: 0x0 opt: 0x0
Aug 26 12:35:52 weiqing-desktop ipsec[7312]: 
      | ***parse ISAKMP Notification Payload:
Aug 26 12:35:52 weiqing-desktop ipsec[7312]: |    next payload 
      type: ISAKMP_NEXT_NONE
Aug 26 12:35:52 weiqing-desktop ipsec[7312]: |    length: 32
Aug 26 12:35:52 weiqing-desktop ipsec[7312]: 
      |    DOI: ISAKMP_DOI_IPSEC
Aug 26 12:35:52 weiqing-desktop ipsec[7312]: |    protocol ID: 3
Aug 26 12:35:52 weiqing-desktop ipsec[7312]: |    SPI size: 16
Aug 26 12:35:52 weiqing-desktop ipsec[7312]: |    Notify Message 
      Type: NO_PROPOSAL_CHOSEN
Aug 26 12:35:52 weiqing-desktop ipsec[7312]: "s1-c1" #1: ignoring 
      informational payload, type NO_PROPOSAL_CHOSEN 
      msgid=00000000
Aug 26 12:35:52 weiqing-desktop ipsec[7312]: | info:  fa 16 b3 e5 
      91 a9 b0 02  a3 30 e1 d9  6e 5a 13 d4
Aug 26 12:35:52 weiqing-desktop ipsec[7312]: | info:  93 e5 e4 d7
Aug 26 12:35:52 weiqing-desktop ipsec[7312]: 
      | processing informational NO_PROPOSAL_CHOSEN (14)

Cisco

<BS>Aug 26 19:00:26 [IKEv1 DEBUG]: Group = 10.20.129.80, 
      IP = 10.20.129.80, sending delete/delete with 
      reason message
Aug 26 19:00:26 [IKEv1 DEBUG]: Group = 10.20.129.80, 
      IP = 10.20.129.80, constructing blank hash payload
Aug 26 19:00:26 [IKEv1 DEBUG]: Group = 10.20.129.80, 
      IP = 10.20.129.80, constructing blank hash payload
Aug 26 19:00:26 [IKEv1 DEBUG]: Group = 10.20.129.80, 
      IP = 10.20.129.80, constructing IKE delete payload
Aug 26 19:00:26 [IKEv1 DEBUG]: Group = 10.20.129.80, 
      IP = 10.20.129.80, constructing qm hash payload
Aug 26 19:00:26 [IKEv1]: IP = 10.20.129.80, IKE_DECODE SENDING 
      Message (msgid=19eb1e59) with payloads : HDR + HASH (8) 
      + DELETE (12) + NONE (0) total length : 80
Aug 26 19:00:26 [IKEv1]: Group = 10.20.129.80, IP = 10.20.129.80, 
      Session is being torn down. Reason: Phase 2 Mismatch