cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
712
Views
0
Helpful
1
Replies

vpn error

a.rooprao
Level 1
Level 1

We are having some issues with VPN between Hubli/Cochin and Vodafone b'lore, it's stopped working after a link issue and we had re-routed the traffic thru Mumbai.

We are not able to revert back thru Blore because tunnel is not coming

Jun 5 11:51:03.078: ISAKMP:(4467): processing NOTIFY PROPOSAL_NOT_CHOSEN protocol 0

spi 0, message ID = -2012478241, sa = 473DCE34

*Jun 5 11:51:03.078: ISAKMP:(4467):peer does not do paranoid keepalives.

*Jun 5 11:51:03.078: ISAKMP:(4467):deleting node -2012478241 error FALSE reason "Informational (in) state 1"

*Jun 5 11:51:03.078: ISAKMP:(4467):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY

*Jun 5 11:51:03.078: ISAKMP:(4467):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE

*Jun 5 11:51:13.062: ISAKMP:(4467): retransmitting phase 2 QM_IDLE 770894547 ...

*Jun 5 11:51:13.062: ISAKMP (0:4467): incrementing error counter on node, attempt 1 of 5: retransmit phase 2

*Jun 5 11:51:13.062: ISAKMP (0:4467): incrementing error counter on sa, attempt 1 of 5: retransmit phase 2

*Jun 5 11:51:13.062: ISAKMP:(4467): retransmitting phase 2 770894547 QM_IDLE

*Jun 5 11:51:13.062: ISAKMP:(4467): sending packet to 192.168.52.1 my_port 500 peer_port 500 (I) QM_IDLE

*Jun 5 11:51:13.062: ISAKMP:(4467):Sending an IKE IPv4 Packet.

*Jun 5 11:51:13.078: IKE Dispatcher: Dropped empty UDP packet.

*Jun 5 11:51:18.074: IKE Dispatcher: Dropped empty UDP packet.

*Jun 5 17:21:22.362: %SEC-6-IPACCESSLOGNP: list 9 permitted 0 10.60.23.1 -> 0.0.0.0, 2 packets

*Jun 5 11:51:23.062: ISAKMP:(4467): retransmitting phase 2 QM_IDLE 770894547 ...

*Jun 5 11:51:23.062: ISAKMP (0:4467): incrementing error counter on node, attempt 2 of 5: retransmit phase 2

*Jun 5 11:51:23.062: ISAKMP (0:4467): incrementing error counter on sa, attempt 2 of 5: retransmit phase 2

*Jun 5 11:51:23.062: ISAKMP:(4467): retransmitting phase 2 770894547 QM_IDLE

*Jun 5 11:51:23.062: ISAKMP:(4467): sending packet to 192.168.52.1 my_port 500 peer_port 500 (I) QM_IDLE

*Jun 5 11:51:23.062: ISAKMP:(4467):Sending an IKE IPv4 Packet.

*Jun 5 11:51:32.938: ISAKMP: set new node 0 to QM_IDLE

1 Reply 1

Farrukh Haroon
VIP Alumni
VIP Alumni

Did you clear the existing tunnels on all ends?

clear crypto isakmp

clear crypto sa

Regards

Farrukh

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card