Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Need debug decryption

Hello! Please help me to understand debug output (file attached). Interface Virtual-ppp1 gets up for 1 minute, no traffic can pass through and then interfaces goes down. I am trying to investigate the cause.

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Gold

Re: Need debug decryption

Under virtual interface, "no peer neighbor-route".

7 REPLIES

Re: Need debug decryption

You have an issue on line 31 (nice and early in the debug):-

000558: *May 1 19:15:30.602: %CRYPTO-5-IKMP_AG_MODE_DISABLED: Unable to initiate or respond to Aggressive Mode while disabled

Enable aggresive mode ISAKMP and re-test (crypto isakmp aggressive-mode)

HTH>

Community Member

Re: Need debug decryption

No, you can ignore CRYPTO errors. This message belongs to ipsec lan-to-lan that should be installed over l2tp tunnel. But as I said tunnel is not working and disconnects after 1 minute.

Community Member

Re: Need debug decryption

While investigating disconnect cause I wander about this debug output:

000527: *May 1 19:15:07.141: Vp1 IPCP: Install route to 83.102.254.234

Is it possible to disable route installation by IPCP?

Re: Need debug decryption

In response to both your posts - without understanding the full topology, and configurations - to find the issue you would have more luck looking for a needle in a haystack.

Community Member

Re: Need debug decryption

My router (871) is connected to provider ethernet, and gets its Fe4 ip address by DHCP. To connect to the internet router needs to establish L2TP tunnel to provider equipment. Connection goes well (interface virtual-ppp1 - up) but no traffic can pass it and connection drops in one minute. I suppose that IPCP installs route to provider L2TP gateway via L2TP tunnel so this gateway becomes unreachable. I want to disable IPCP route installation.

Hall of Fame Super Gold

Re: Need debug decryption

Under virtual interface, "no peer neighbor-route".

Community Member

Re: Need debug decryption

Yes! Thats it! Thank you!

293
Views
0
Helpful
7
Replies
CreatePlease to create content