DMVPN: ISAKMP deleting SA reason "Death by retransmission P1"

Unanswered Question
Aug 15th, 2008
User Badges:
  • Silver, 250 points or more

We are performing a large number of site migrations by moving over onto DMVPN.

Most sites are successful without any issues but 1or2 are displaying the following issue after PPP:

router debug crypto ipsec error:

ISAKMP:(0:214:SW:1):deleting SA reason "Death by retransmission P1"

Any ideas?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
dhananjoy chowdhury Sat, 08/16/2008 - 12:29
User Badges:
  • Silver, 250 points or more


Can you post a more detailed Debug information.

Also, please specify the IOS ver.

Are the Spoke routers (both working and not working) having the same IOS version running?

Also check on the Hub router, whether the requests are reaching or not, from the failing HUbs.

Farrukh Haroon Sat, 08/16/2008 - 23:13
User Badges:
  • Red, 2250 points or more

Dear Ajaz

Is it possible to post the configurations here? can you post more details about the failing sites? e.g.

What is the routing protocol?

What is the NRHP hold-time?

Are these troublesome spokes registered with the Hub before failing (show ip nhrp)?

What IOS Version (DMVPN Phase ..?)

Does the VPN work at anytime or it doesnt work at all?




This Discussion