Site to Site VPN getspi error

Unanswered Question
Dec 20th, 2012

Hi,

My site to site VPN is failing with these error message.

Using IPsec SA configuration: 172.28.0.0/16<->192.168.100.0/28

[IKE] INFO:  Configuration found for 209.87.231.245.

[IKE] INFO:  Configuration found for 209.87.231.245.

[IKE] INFO:  Initiating new phase 2 negotiation: 209.183.24.116[0]<=>209.87.231.245[0]

[IKE] ERROR:  encryption 7 failed.

[IKE] ERROR:  failed to start post getspi.

[IKE] INFO:  an undead schedule has been deleted: 'quick_i1prep'

Looks like something is hung at the ASA side, is there a way to clear the tunnel or the problem bigger then I think...

Thank you for your help.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 0 (0 ratings)
ivykaixin@126.com Thu, 12/20/2012 - 21:19

Hi

please check the configration about the ipsec phase 2 transformset .

I think there is some miss about the configtration .

Would you share your configration of the ASA?

apptionadmin Fri, 12/21/2012 - 05:16

Hi,

I rebooted both Firewall this morning and site to site is up and working.

Actions

Login or Register to take actions

This Discussion

Posted December 20, 2012 at 6:27 AM
Stats:
Replies:2 Avg. Rating:
Views:528 Votes:0
Shares:0
Tags: vpn, site
+

Related Content

Discussions Leaderboard