An administrator receives the following error message:"IKE phase-2 negotiation failed when processing Proxy ID.

In the IKE Gateway configuration, verify that the IP address for each VPN peer is accurate

Verify that the IP addresses can be pinged and that routing issues are not causing the connection failure

Check whether the VPN peer on one end is set up correctly using policy-based VPN

In the IPSec Crypto profile configuration, verify that PFS is either enabled on both VPN peers or disabled on both VPN peers.