Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
1890
Views
0
Helpful
2
Replies

No SPI to identify Phase 2 SA!

Locayta123
Level 1
Level 1

‎12-01-2011 08:02 AM

Hi all.

I have a an issue with one particular VPN user. They are using the built in Windows Vista client to connect to my ASA 5510. All other users do not have an issue and i receive the following error at roughly the same time of day when the drop happens. Authentication is done by my AD Server which handles all logins.

<177>%ASA-1-713900: Group = DefaultRAGroup, Username = username, IP = x.x.x.x, construct_ipsec_delete(): No SPI to identify Phase 2 SA!

Thanks,

J.

Labels:
0 Helpful
2 Replies 2

Patrick0711
Level 3
Level 3

‎12-01-2011 08:47 AM

Hello Jamie,

Do you have the debug information prior to this message? 

-Patrick

0 Helpful

Locayta123
Level 1
Level 1
In response to Patrick0711

‎12-01-2011 08:51 AM

No i don't. That's the only information i have that is displayed.

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents