Recommend:
To the knowledge base
Knowledge document #3781
FRITZ!Box 7530 AX
This support document is available for the following products:

FRITZ!VPN reports "No matching security association found"

The FRITZ!VPN software cannot establish a VPN connection to the FRITZ!Box. The following error message is displayed in the FRITZ!VPN journal:

"Establishing connection to [...] failed. No matching security association found

Repeating attempt to establish a VPN connection

FRITZ!VPN does not support the Diffie-Hellman initial key exchange with 2048 bit (DH group 14) that the FRITZ!Box prefers starting with FRITZ!OS 8 and therefore cannot establish a connection to the FRITZ!Box on the first attempt.

However, when additional login attempt are made, the FRITZ!Box also accepts older security policies accepted by FRITZ!VPN so that FRITZ!VPN can establish a VPN connection. Therefore, repeat the connection attempt with FRITZ!VPN:

  1. Start the FRITZ!VPN software on the computer.
  2. Select the symbol with the MyFRITZ! address of the FRITZ!Box.
  3. Click "Establish" to establish the VPN connection.
  4. After the FRITZ!Box rejects the first connection attempt, click "Establish" again to establish the VPN connection.