Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Rejecting IPSec tunnel: no matching crypto map entry for remote proxy on interface outside.

Hi,

I have read a problem where the VPN between an ISP and ourselves started dropping sessions.  I have rebuilt the crypto map and tried to dig deeper into my config and some basic troubleshooting while I await the ISP to respond. 

Any ideas?

Thanks Steve

https://supportforums.cisco.com/thread/255085

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807e0aca.shtml#solution10

5   Jun 13 15:46:25   713904   IP = 209.183.xxx.xxx, Received encrypted packet with no matching SA, dropping

4   Jun 13 15:46:25   113019   Group = 209.183.xxx.xxx, Username = 209.183.xxx.xxx, IP = 209.183.xxx.xxx, Session disconnected. Session Type: IKE, Duration: 0h:00m:00s, Bytes xmt: 0, Bytes rcv: 0, Reason: crypto map policy not found

3   Jun 13 15:46:25   713902   Group = 209.183.xxx.xxx, IP = 209.183.xxx.xxx, Removing peer from correlator table failed, no match!

3   Jun 13 15:46:25   713902   Group = 209.183.xxx.xxx, IP = 209.183.xxx.xxx, QM FSM error (P2 struct &0xda90f540, mess id 0x76c09eb7)!

3   Jun 13 15:46:25   713061   Group = 209.183.xxx.xxx, IP = 209.183.xxx.xxx, Rejecting IPSec tunnel: no matching crypto map entry for remote proxy 172.16.0.0/255.255.240.0/0/0 local proxy 0.0.0.0/0.0.0.0/0/0 on interface outside

5   Jun 13 15:46:25   713119   Group = 209.183.xxx.xxx, IP = 209.183.xxx.xxx, PHASE 1 COMPLETED

6   Jun 13 15:46:25   113009   AAA retrieved default group policy (DfltGrpPolicy) for user = 209.183.xxx.xxx

6   Jun 13 15:46:25   713172   Group = 209.183.xxx.xxx, IP = 209.183.xxx.xxx, Automatic NAT Detection Status: Remote end is NOT behind a NAT device This end is NOT behind a NAT device

Everyone's tags (4)
1175
Views
0
Helpful
0
Replies
CreatePlease login to create content