Issue with DMVPN from 877W to 1841

Unanswered Question

I am trying to connect an 877W to an 1841 via DMVPN. An existing connection with 857W works fine using the same configuration (different tunnel IP etc)


When I debug the crypto engine I get ...


000097: Mar 19 14:26:39.058 Brisban: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is ON

000098: Mar 19 14:26:39.062 Brisban: select crypto engine: ce_engine[3] does not accept the capabilities


Would anyone have an suggestions what could be causing this?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.

Some configs:


The 877W

crypto isakmp policy 99

authentication pre-share

crypto isakmp key secret address 0.0.0.0 0.0.0.0

crypto isakmp invalid-spi-recovery

crypto isakmp keepalive 10

crypto isakmp nat keepalive 20

!

!

crypto ipsec transform-set trans99 esp-des esp-md5-hmac comp-lzs

mode transport

!

crypto ipsec profile vpnprof

set transform-set trans99


Tunnel99


tunnel protection ipsec profile vpnprof


sh crypto engine configuration

crypto engine name: Virtual Private Network (VPN) Module

crypto engine type: hardware

State: Enabled

Location: onboard 0

Product Name: Onboard-VPN

FW Version: 1

Time running: 2930 seconds

Compression: Yes

DES: Yes

3 DES: Yes

AES CBC: Yes (128,192,256)

AES CNTR: No

Maximum buffer length: 4096

Maximum DH index: 0020

Maximum SA index: 0020

Maximum Flow index: 0040

Maximum RSA key size: 0000


crypto lib version: 20.0.0


crypto lib version: 20.0.0


The 1841

crypto isakmp policy 99

authentication pre-share

crypto isakmp key secret address 0.0.0.0 0.0.0.0

crypto isakmp invalid-spi-recovery

crypto isakmp keepalive 10

crypto isakmp nat keepalive 20

!

!

crypto ipsec transform-set trans99 esp-des esp-md5-hmac comp-lzs

mode transport

!

crypto ipsec profile vpnprof

set transform-set trans99


Tunnel99


tunel protection ipsec profile vpnprof


sh crypto engine configuration


crypto engine name: Virtual Private Network (VPN) Module

crypto engine type: hardware

State: Enabled

Location: onboard 0

Product Name: Onboard-VPN

HW Version: 1.0

Compression: Yes

DES: Yes

3 DES: Yes

AES CBC: Yes (128,192,256)

AES CNTR: No

Maximum buffer length: 4096

Maximum DH index: 0000

Maximum SA index: 0000

Maximum Flow index: 0300

Maximum RSA key size: 0000


crypto lib version: 19.0.0


crypto engine in slot: 0

platform: VPN hardware accelerator


Crypto Adjacency Counts:

Lock Count: 14086

Unlock Count: 14086

crypto lib version: 19.0.0


Actions

This Discussion