192.168.10.1    99.36.x.x   MM_KEY_EXCH         93    0
192.168.10.1    99.36.x.x   MM_KEY_EXCH         92    0
192.168.10.1    99.36.x.x   MM_KEY_EXCH         91    0
192.168.10.1    99.36.x.x   MM_NO_STATE         89    0 (deleted)

Inf_Rtr#show crypto ipsec sa peer 99.36.x.x

interface: FastEthernet0/1
    Crypto map tag: lim, local addr. 192.168.10.1

   protected vrf:
   local  ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
   remote ident (addr/mask/prot/port): (172.24.172.0/255.255.255.0/0/0)
   current_peer: 99.36.x.x:4500
     PERMIT, flags={origin_is_acl,}
    #pkts encaps: 45267, #pkts encrypt: 45267, #pkts digest 45267
    #pkts decaps: 43765, #pkts decrypt: 43765, #pkts verify 43765
    #pkts compressed: 0, #pkts decompressed: 0
    #pkts not compressed: 0, #pkts compr. failed: 0
    #pkts not decompressed: 0, #pkts decompress failed: 0
    #send errors 4, #recv errors 0

     local crypto endpt.: 192.168.10.1, remote crypto endpt.: 99.36.x.x
     path mtu 1500, ip mtu 1500, ip mtu idb FastEthernet0/1
     current outbound spi: 659C3260

     inbound esp sas:
      spi: 0x506ECB29(1349438249)
        transform: esp-3des esp-md5-hmac ,
        in use settings ={Tunnel UDP-Encaps, }
        slot: 0, conn id: 23573, flow_id: 11577, crypto map: lim
        sa timing: remaining key lifetime (k/sec): (4475286/1790)
        IV size: 8 bytes
        replay detection support: Y

     inbound ah sas:

     inbound pcp sas:

     outbound esp sas:
      spi: 0x659C3260(1704735328)
        transform: esp-3des esp-md5-hmac ,
        in use settings ={Tunnel UDP-Encaps, }
        slot: 0, conn id: 23574, flow_id: 11578, crypto map: lim
        sa timing: remaining key lifetime (k/sec): (4475121/1790)
        IV size: 8 bytes
        replay detection support: Y

     outbound ah sas:

     outbound pcp sas:

Apr  7 10:39:16: %CRYPTO-4-IKMP_BAD_MESSAGE: IKE message from 99.36.x.x   failed its sanity check or is malformed
Apr  7 10:40:26: %CRYPTO-4-IKMP_BAD_MESSAGE: IKE message from 99.36.x.x   failed its sanity check or is malformed
Apr  7 10:41:33: %CRYPTO-4-IKMP_BAD_MESSAGE: IKE message from 99.36.x.x   failed its sanity check or is malformed
Apr  7 10:43:08: %CRYPTO-4-IKMP_BAD_MESSAGE: IKE message from 99.36.x.x   failed its sanity check or is malformed
Apr  7 10:45:18: %CRYPTO-4-IKMP_BAD_MESSAGE: IKE message from 99.36.x.x   failed its sanity check or is malformed
Apr  7 10:49:18: %CRYPTO-4-IKMP_BAD_MESSAGE: IKE message from 99.36.x.x   failed its sanity check or is malformed
Apr  7 10:50:45: %CRYPTO-4-IKMP_BAD_MESSAGE: IKE message from 99.36.x.x   failed its sanity check or is malformed
Apr  7 10:53:19: %CRYPTO-4-IKMP_BAD_MESSAGE: IKE message from 99.36.x.x   failed its sanity check or is malformed
Apr  7 10:54:19: %CRYPTO-4-IKMP_BAD_MESSAGE: IKE message from 99.36.x.x   failed its sanity check or is malformed
Apr  7 10:55:25: %CRYPTO-4-IKMP_BAD_MESSAGE: IKE message from 99.36.x.x   failed its sanity check or is malformed
Apr  7 10:56:26: %CRYPTO-4-IKMP_BAD_MESSAGE: IKE message from 99.36.x.x   failed its sanity check or is malformed
Apr  7 10:57:27: %CRYPTO-4-IKMP_BAD_MESSAGE: IKE message from 99.36.x.x   failed its sanity check or is malformed


Config

crypto keyring location
  pre-shared-key address 99.36.x.x key key
crypto isakmp policy 10
 encr 3des
 hash md5
 authentication pre-share
 group 2
 lifetime 14400
!
crypto isakmp policy 20
 encr 3des
 hash md5
 authentication pre-share
 group 2
!
crypto isakmp profile location
   keyring location
   match identity address 99.36.x.x 255.255.255.255
crypto ipsec transform-set 3des esp-3des esp-md5-hmac
crypto map lim 172 ipsec-isakmp
 description VPN
 set peer 99.36.x.x
 set transform-set 3des
 set pfs group2
 set isakmp-profile location
 match address 172
 reverse-route
access-list 172 permit ip any 172.24.172.0 0.0.0.255