Site to Site VPN getspi error

Unanswered Question
Dec 20th, 2012

Hi,

My site to site VPN is failing with these error message.

Using IPsec SA configuration: 172.28.0.0/16<->192.168.100.0/28

[IKE] INFO:  Configuration found for 209.87.231.245.

[IKE] INFO:  Configuration found for 209.87.231.245.

[IKE] INFO:  Initiating new phase 2 negotiation: 209.183.24.116[0]<=>209.87.231.245[0]

[IKE] ERROR:  encryption 7 failed.

[IKE] ERROR:  failed to start post getspi.

[IKE] INFO:  an undead schedule has been deleted: 'quick_i1prep'

Looks like something is hung at the ASA side, is there a way to clear the tunnel or the problem bigger then I think...

Thank you for your help.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
ivykaixin@126.com Thu, 12/20/2012 - 21:19

Hi

please check the configration about the ipsec phase 2 transformset .

I think there is some miss about the configtration .

Would you share your configration of the ASA?

apptionadmin Fri, 12/21/2012 - 05:16

Hi,

I rebooted both Firewall this morning and site to site is up and working.

Actions

Login or Register to take actions

This Discussion

Posted December 20, 2012 at 6:27 AM
Stats:
Replies:2 Overall Rating:
Views:544 Votes:0
Shares:0
Tags: vpn, site
+

Related Content

 

Discussions Leaderboard

Rank Username Points
1
Federico Coto F...
1,913
2
Jouni Forss
1,876
3
Marvin Rhoads
1,625
4
Karsten Iwen
1,109
5
Jon Marshall
688
Rank Username Points
Adeolu Owokade
40
Marvin Rhoads
30
rizwanr74
15
thiland
10
Marius Gunnerud
10