Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

LinkSys BEFVP41 calling a C1751: Problem...

Have a look at this portion of a debug. Phase-1 will not negotiate. Any general pointers?? IPs are altered for security, but *are* routable on the internet.

__________________________________________________

18:55:33: ISAKMP (0:1): Checking ISAKMP transform 1 against priority 3 policy

18:55:33: ISAKMP: encryption DES-CBC

18:55:33: ISAKMP: hash SHA

18:55:33: ISAKMP: auth pre-share

18:55:33: ISAKMP: default group 1

18:55:33: ISAKMP: life type in seconds

18:55:33: ISAKMP: life duration (VPI) of 0x0 0x0 0x70 0x80

18:55:33: ISAKMP (0:1): atts are acceptable. Next payload is 3

18:55:33: CryptoEngine0: generate alg parameter

18:55:33: CryptoEngine0: CRYPTO_ISA_DH_CREATE(hw)(ipsec)

18:55:33: CRYPTO_ENGINE: Dh phase 1 status: 0

18:55:33: ISAKMP (0:1): Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Old State = IKE_R_MM1 New State = IKE_R_MM1

18:55:33: ISAKMP (0:1): sending packet to 10.10.10.10 (R) MM_SA_SETUP

18:55:33: ISAKMP (0:1): Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Old State = IKE_R_MM1 New State = IKE_R_MM2

18:55:43: ISAKMP (0:1): retransmitting phase 1 MM_SA_SETUP...

18:55:43: ISAKMP (0:1): incrementing error counter on sa: retransmit phase 1

18:55:43: ISAKMP (0:1): retransmitting phase 1 MM_SA_SETUP

18:55:43: ISAKMP (0:1): sending packet to 10.10.10.10 (R) MM_SA_SETUP

1 REPLY
Cisco Employee

Re: LinkSys BEFVP41 calling a C1751: Problem...

This doesn't tell us a whole lot. The ISAKMP parameters are correct, going by the "atts are acceptable" statement. The router then sends a reply packet back to the LinkSys but gets no response to it, it then retransmits it 10 seconds later, still no response, etc.

Can you check the LinkSys log files and see what it's saying, this debug doesn't give us enough info other than the LinkSys doesn't reply to us. You might want to check any access-lists or filtering, it could be that the LinkSys doesn't receive our reply, so it never sends another packet.

146
Views
0
Helpful
1
Replies
CreatePlease to create content