Site to Site VPN getspi error

apptionadmin · ‎12-20-2012

Hi,

My site to site VPN is failing with these error message.

Using IPsec SA configuration: 172.28.0.0/16<->192.168.100.0/28

[IKE] INFO: Configuration found for 209.87.231.245.

[IKE] INFO: Initiating new phase 2 negotiation: 209.183.24.116[0]<=>209.87.231.245[0]

[IKE] ERROR: encryption 7 failed.

[IKE] ERROR: failed to start post getspi.

[IKE] INFO: an undead schedule has been deleted: 'quick_i1prep'

Looks like something is hung at the ASA side, is there a way to clear the tunnel or the problem bigger then I think...

Thank you for your help.

ivykaixin · ‎12-20-2012

Hi

please check the configration about the ipsec phase 2 transformset .

I think there is some miss about the configtration .

Would you share your configration of the ASA?

apptionadmin · ‎12-21-2012

Hi,

I rebooted both Firewall this morning and site to site is up and working.