VPN backup with isdn

Unanswered Question
Nov 27th, 2007

i want to make a vpn back up solution with isdn ddr.i have ipsec tunnel over leased line.i had complete configuration when the vpn goes down as secondary link comes up but doesnt establish phase 1 state.

Is there any configuration guide or link you ve suggested ?


best regards

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Goutam Sanyal Wed, 11/28/2007 - 02:18

Hi,

Is that LL or MPLS? If LL then pls put the output. If MPLS then there is no provision to connect the IPSec VPN without dialing it again.


thanks

Goutam


tdorduncu Thu, 11/29/2007 - 05:30

here is output ;


crypto isakmp policy 10

encr 3des

hash md5

authentication pre-share

group 2

crypto isakmp key x.x.x.x address a.a.a.a

!

!

crypto ipsec transform-set a.a.a.a esp-3des esp-md5-hmac

!

crypto map name 1 ipsec-isakmp

set peer x.x.x.x

set transform-set name

match address 101

!

crypto map namex 2 ipsec-isakmp

set peer x.x.x.x

set transform-set name

match address 101


Nov 28 06:55:03.003: ISAKMP (0:3): SA has been authenticated with x.x.x.x

Nov 28 06:55:03.003: ISAKMP (0:3): peer matches *none* of the profiles

Nov 28 06:55:03.003: ISAKMP (0:3): Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Nov 28 06:55:03.003: ISAKMP (0:3): Old State = IKE_I_MM5 New State = IKE_I_MM6


Nov 28 06:55:03.003: ISAKMP (0:3): Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Nov 28 06:55:03.003: ISAKMP (0:3): Old State = IKE_I_MM6 New State = IKE_I_MM6


Nov 28 06:55:03.003: ISAKMP (0:3): Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Nov 28 06:55:03.003: ISAKMP (0:3): Old State = IKE_I_MM6 New State = IKE_P1_COMPLETE


Nov 28 06:55:03.003: ISAKMP (0:3): beginning Quick Mode exchange, M-ID of 1748821339

Nov 28 06:55:03.003: ISAKMP (0:3): sending packet to x.x.x.x my_port 500 peer_port 500 (I) QM_IDLE

Nov 28 06:55:03.003: ISAKMP (0:3): Node 1748821339, Input = IKE_MESG_INTERNAL, IKE_INIT_QM

Nov 28 06:55:03.003: ISAKMP (0:3): Old State = IKE_QM_READY New State = IKE_QM_I_QM1

Nov 28 06:55:03.003: ISAKMP (0:3): Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE

Nov 28 06:55:03.003: ISAKMP (0:3): Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE


Nov 28 06:55:03.063: ISAKMP (0:3): received packet from x.x.x.x dport 500 sport 500 Global (I) QM_IDLE

Nov 28 06:55:03.067: ISAKMP: set new node -2045034915 to QM_IDLE

Nov 28 06:55:03.067: ISAKMP (0:3): processing HASH payload. message ID = -2045034915

Nov 28 06:55:03.067: ISAKMP (0:3): processing NOTIFY PROPOSAL_NOT_CHOSEN protocol 3

spi 1689364849, message ID = -2045034915, sa = 646EACC0

Nov 28 06:55:03.067: ISAKMP (0:3): deleting spi 1689364849 message ID = 1748821339

Nov 28 06:55:03.067: ISAKMP (0:3): deleting node 1748821339 error TRUE reason "delete_larval"

Nov 28 06:55:03.067: ISAKMP (0:3): deleting node -2045034915 error FALSE reason "informational (in) state 1"

Nov 28 06:55:03.067: ISAKMP (0:3): Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY

Nov 28 06:55:03.067: ISAKMP (0:3): Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE




Actions

This Discussion