[charlesdf23]

This usually means that your encryption domains don't match up. Ensure that you are both using the same thing. (ie hosts and hosts or network and networks). Sometimes building tunnel's to Cisco products you have to uncheck "key exchange for subnets" in order to establish Phase 2