cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
714
Views
0
Helpful
1
Replies

vpn error

a.rooprao
Level 1
Level 1

We are having some issues with VPN between Hubli/Cochin and Vodafone b'lore, it's stopped working after a link issue and we had re-routed the traffic thru Mumbai.

We are not able to revert back thru Blore because tunnel is not coming

Jun 5 11:51:03.078: ISAKMP:(4467): processing NOTIFY PROPOSAL_NOT_CHOSEN protocol 0

spi 0, message ID = -2012478241, sa = 473DCE34

*Jun 5 11:51:03.078: ISAKMP:(4467):peer does not do paranoid keepalives.

*Jun 5 11:51:03.078: ISAKMP:(4467):deleting node -2012478241 error FALSE reason "Informational (in) state 1"

*Jun 5 11:51:03.078: ISAKMP:(4467):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY

*Jun 5 11:51:03.078: ISAKMP:(4467):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE

*Jun 5 11:51:13.062: ISAKMP:(4467): retransmitting phase 2 QM_IDLE 770894547 ...

*Jun 5 11:51:13.062: ISAKMP (0:4467): incrementing error counter on node, attempt 1 of 5: retransmit phase 2

*Jun 5 11:51:13.062: ISAKMP (0:4467): incrementing error counter on sa, attempt 1 of 5: retransmit phase 2

*Jun 5 11:51:13.062: ISAKMP:(4467): retransmitting phase 2 770894547 QM_IDLE

*Jun 5 11:51:13.062: ISAKMP:(4467): sending packet to 192.168.52.1 my_port 500 peer_port 500 (I) QM_IDLE

*Jun 5 11:51:13.062: ISAKMP:(4467):Sending an IKE IPv4 Packet.

*Jun 5 11:51:13.078: IKE Dispatcher: Dropped empty UDP packet.

*Jun 5 11:51:18.074: IKE Dispatcher: Dropped empty UDP packet.

*Jun 5 17:21:22.362: %SEC-6-IPACCESSLOGNP: list 9 permitted 0 10.60.23.1 -> 0.0.0.0, 2 packets

*Jun 5 11:51:23.062: ISAKMP:(4467): retransmitting phase 2 QM_IDLE 770894547 ...

*Jun 5 11:51:23.062: ISAKMP (0:4467): incrementing error counter on node, attempt 2 of 5: retransmit phase 2

*Jun 5 11:51:23.062: ISAKMP (0:4467): incrementing error counter on sa, attempt 2 of 5: retransmit phase 2

*Jun 5 11:51:23.062: ISAKMP:(4467): retransmitting phase 2 770894547 QM_IDLE

*Jun 5 11:51:23.062: ISAKMP:(4467): sending packet to 192.168.52.1 my_port 500 peer_port 500 (I) QM_IDLE

*Jun 5 11:51:23.062: ISAKMP:(4467):Sending an IKE IPv4 Packet.

*Jun 5 11:51:32.938: ISAKMP: set new node 0 to QM_IDLE

1 Reply 1

Farrukh Haroon
VIP Alumni
VIP Alumni

Did you clear the existing tunnels on all ends?

clear crypto isakmp

clear crypto sa

Regards

Farrukh

Review Cisco Networking products for a $25 gift card