Tunnel going UP & down

Anand Narayana · ‎08-13-2008

I often get this message once in every 5min. Tunnel will be up for 5mins & can to reach the remote host up to 5 min. & then disconnects. what is causing the issues to make this happen.

Group = x.x.x.x, IP = x.x.x.x, removing peere from the correlator table failed, no match!

Group = x.x.x.x, IP = x.x.x.x, QM FSM error (P2 struct &0xcb7c1558, mess id 0x7aa95d3)!

Group = x.x.x.x, IP = x.x.x.x, Rejecting IPSec tunnel: no matching crypto map entry for remote proxy 0.0.0.0/0.0.0.0/1/0 local proxy 0.0.0.0/0.0.0.0/1/0 on interface outside

Group = x.x.x.x, IP = x.x.x.x, PHASE 1 COMPLETED

Farrukh Haroon · ‎08-13-2008

Are you crypto ACLs mirror images (opposite) on both sides? Are you using any any for Crypto ACL? If possible post here.

Seems something to do with Phase 2 Parameters.

e.g. PFS group mismatch, Crypto ACL etc.

Regards

Farrukh

Anand Narayana · ‎08-15-2008

It was actually the clients ACL entry mismatch which made the vpn tunnel bumping up & down.

Farrukh Haroon · ‎08-15-2008

Yup its usually the ACL or PFS mismatch with Phase 2. Anyway its great to know you have it working now :)

Regards

Farrukh