DMVPN: ISAKMP deleting SA reason "Death by retransmission P1"

[AJAZ NAWAZ]

We are performing a large number of site migrations by moving over onto DMVPN.

Most sites are successful without any issues but 1or2 are displaying the following issue after PPP:

router debug crypto ipsec error:

ISAKMP:(0:214:SW:1):deleting SA reason "Death by retransmission P1"

Any ideas?

Ajaz

[dhananjoy chowdhury]

HI,

Can you post a more detailed Debug information.

Also, please specify the IOS ver.

Are the Spoke routers (both working and not working) having the same IOS version running?

Also check on the Hub router, whether the requests are reaching or not, from the failing HUbs.

[Farrukh Haroon]

Dear Ajaz

Is it possible to post the configurations here? can you post more details about the failing sites? e.g.

What is the routing protocol?

What is the NRHP hold-time?

Are these troublesome spokes registered with the Hub before failing (show ip nhrp)?

What IOS Version (DMVPN Phase ..?)

Does the VPN work at anytime or it doesnt work at all?

Regards

Farrukh