Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
275
Views
0
Helpful
1
Replies

Phase 2 problem

mikedelafield
Level 1
Level 1

‎12-04-2007 07:33 AM - edited ‎03-09-2019 07:32 PM

Hi.

We are having problems with our ipsec sa.

Phase 2 is failing to establish with a high number of send errors.

#send errors 411125

Debug error is

Dec 04 16:00:16 [IKEv1]: Group = 194.71.21.21, IP = 194.71.21.21, Static Crypto Map check, map = outside_map, seq = 6, ACL does not match proxy IDs src:0.0.0.0 dst:network-Local

I know this implies that a matching crypto map is not present but this WAS working until today.

Could anyone help?

Labels:
0 Helpful
1 Reply 1

mikedelafield
Level 1
Level 1

‎12-04-2007 07:38 AM

it seems to attempt the SA as expecting using the local Ident but then attempts another using 0.0.0.0/0.0.0.0 any ideas why this would happen?

0 Helpful
Customers Also Viewed These Support Documents