Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Cannot sucessfully negotiate ISAKMP Phase 1

I am trying to set up a site to site VPN tunnel using GRE over IPSEC. Below is the configuration from both routers and debug output. I'm scratching my head on this one. I'm using two Cisco 7600 routers with  SSC-400 SPA modules and 720 Supervisors. The IOS on R1 is 12.2 SXI2 and R2 has 12.2 SXI3.

Any help is appreciated.

Arshad

Everyone's tags (6)
1 REPLY
Hall of Fame Super Silver

Cannot sucessfully negotiate ISAKMP Phase 1

All of your IPsec setup appears correct.

The key debug output appears top be "Unable to allocate IKE SA". I note a similar problem was encountered and documented in this thread. Perhaps you are dealing with a similar incompatibility between the crypto engines and MPLS (or another feature)?

523
Views
0
Helpful
1
Replies
CreatePlease to create content