cat 6500 with IPSec VPN module. VTI is configured, but debugs show that it is unable to allocate ike sa.
Have changed the key, removed the keyring and just used a global type isakmp key. no change.
crypto engine mode vrf
crypto keyring key1
  pre-shared-key address 1.1.1.1 key <key>
crypto isakmp policy 1
  encr aes
  hash sha
  authentication pre-share
crypto isakmp profile isa_prof
  keyring key1
  match identity address 1.1.1.1 255.255.255.255
crypto ipsec transform-set proposal esp-aes esp-sha-hmac
crypto ipsec profile vpnprof
 set transform-set proposal
 set isakmp-profile isa_prof
int Tunnel0
 ip vrf forwarding inside
 ip addr 10.10.10.0 255.255.255.254
 ip summary-address 3 10.0.0.0 255.0.0.0 255
 tunnel source Loopback1
 tunnel destination 1.1.1.1
 tunnel mode ipsec ipv4
 tunnel protection ipsec profile vpnprof
 crypto engine slot 3/0 inside
int Loopback1
 ip addr 2.2.2.2 255.255.255.255
 crypto engine slot 3/0 outside