> Source: [sk163325](https://support.checkpoint.com/results/sk/sk163325)

# sk163325 - VPN with DAIP Gateway fails with 'No Proposal Chosen' error sent to peer

| Property | Value |
|----------|-------|
| Solution ID | sk163325 |
| Date Created | 2019-12-18 |
| Last Modified | 2021-08-05 |
| Technical Level | General |

## Symptoms

- * VPN with DAIP Gateway fails with "`No Proposal Chosen`" error sent to peer.
* Logs show that a failure occurred because of "`wrong authentication method`" and mention that PSK is being used. However, the PSK settings in the VPN community show that there is no PSK entered for the peer; the option to enter one is grayed out, but the option for PSK is checked.
* After running an IKE debug, the user sees that certificates are being used in the Main Mode negotiation in packet 5.

## Cause

DAIP VPN configurations must use certificates. In the community settings, "PSK" was selected for use with the DAIP peer Gateway.

## Solution

Uncheck the Pre-Shared Secret option in the relevant VPN community and install the policy.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content