Symptom
Router allows to negotiated mixture of configured IKEv2 proposals, not one or the other proposal. For example integrity parameter from first proposal and DH group from the second proposal.
Conditions
More than one proposal configured under crypto IKEv2 policy. Example:
crypto ikev2 policy IKEv2-pol
proposal IKEv2-prop1
proposal IKEv2-prop2
Workaround
Use only one IKEv2 proposal under IKEv2 policy.
Further Problem Description
You can verify negotiated proposals using "show crypto ikev2 sa detail".
