Site to Site VPN getspi error

Unanswered Question
Dec 20th, 2012


My site to site VPN is failing with these error message.

Using IPsec SA configuration:<->

[IKE] INFO:  Configuration found for

[IKE] INFO:  Configuration found for

[IKE] INFO:  Initiating new phase 2 negotiation:[0]<=>[0]

[IKE] ERROR:  encryption 7 failed.

[IKE] ERROR:  failed to start post getspi.

[IKE] INFO:  an undead schedule has been deleted: 'quick_i1prep'

Looks like something is hung at the ASA side, is there a way to clear the tunnel or the problem bigger then I think...

Thank you for your help.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings) Thu, 12/20/2012 - 21:19


please check the configration about the ipsec phase 2 transformset .

I think there is some miss about the configtration .

Would you share your configration of the ASA?

apptionadmin Fri, 12/21/2012 - 05:16


I rebooted both Firewall this morning and site to site is up and working.


This Discussion

Related Content