Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

DMVPN issue

Hi

I have a problem with DMVPN. After Hub reload tunnels won't go up, status is UP-IDLE.

Interface: GigabitEthernet0/0
Session status: UP-IDLE
Peer: xxx port 500
  IKEv1 SA: local xxx/500 remote xxx/500 Active 

Debug output:

267889: Sep 10 10:32:45.800 Warsaw: ISAKMP (1182): received packet from xxx dport 500 sport 500 Global (I) QM_IDLE
267890: Sep 10 10:32:45.800 Warsaw: ISAKMP: set new node -254641975 to QM_IDLE
267891: Sep 10 10:32:45.800 Warsaw: ISAKMP:(1182): processing HASH payload. message ID = 4040325321
267892: Sep 10 10:32:45.800 Warsaw: ISAKMP:(1182): processing NOTIFY DPD/R_U_THERE protocol 1
        spi 0, message ID = 4040325321, sa = 0x325D0E60
267893: Sep 10 10:32:45.800 Warsaw: ISAKMP:(1182):deleting node -254641975 error FALSE reason "Informational (in) state 1"
267894: Sep 10 10:32:45.800 Warsaw: ISAKMP:(1182):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
267895: Sep 10 10:32:45.800 Warsaw: ISAKMP:(1182):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE

267896: Sep 10 10:32:45.800 Warsaw: ISAKMP:(1182):DPD/R_U_THERE received from peer xxx, sequence 0x1DF40585
267897: Sep 10 10:32:45.800 Warsaw: ISAKMP: set new node 1196192193 to QM_IDLE
267898: Sep 10 10:32:45.800 Warsaw: ISAKMP:(1182):Sending NOTIFY DPD/R_U_THERE_ACK protocol 1
        spi 721927392, message ID = 1196192193
267899: Sep 10 10:32:45.804 Warsaw: ISAKMP:(1182): seq. no 0x1DF40585
267900: Sep 10 10:32:45.804 Warsaw: ISAKMP:(1182): sending packet to xxx my_port 500 peer_port 500 (I) QM_IDLE
267901: Sep 10 10:32:45.804 Warsaw: ISAKMP:(1182):Sending an IKE IPv4 Packet.
267902: Sep 10 10:32:45.804 Warsaw: ISAKMP:(1182):purging node 1196192193
267903: Sep 10 10:32:45.804 Warsaw: ISAKMP:(1182):Input = IKE_MESG_FROM_PEER, IKE_MESG_KEEP_ALIVE
267904: Sep 10 10:32:45.804 Warsaw: ISAKMP:(1182):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE

267905: Sep 10 10:32:46.556 Warsaw: ISAKMP:(1182):purging node -1373503360
267906: Sep 10 10:32:50.560 Warsaw: IPSEC(key_engine): ## Session ID: 858 request timer fired: count = 1,
  (identity) local= 94.154.30.78:0, remote= xxx:0,
    local_proxy= 94.154.30.78/255.255.255.255/47/0,
    remote_proxy= xxx/255.255.255.255/47/0
267907: Sep 10 10:32:50.560 Warsaw: IPSEC(sa_request): ## Session ID: 858 ,
  (identity) local= 94.154.30.78:0, remote= xxx:0,
    local_proxy= 94.154.30.78/255.255.255.255/47/0,
    remote_proxy= xxx/255.255.255.255/47/0,
    protocol= ESP, transform= esp-aes 256 esp-sha-hmac  (Tunnel),
    lifedur= 3600s and 4608000kb,
    spi= 0x0(0), conn_id= 0, keysize= 256, flags= 0x0
267908: Sep 10 10:32:50.560 Warsaw: ISAKMP: set new node 0 to QM_IDLE
267909: Sep 10 10:32:50.560 Warsaw: SA has outstanding requests  (local 50.93.16.44 port 500, remote 50.93.16.16 port 500)
267910: Sep 10 10:32:50.560 Warsaw: ISAKMP:(1182): sitting IDLE. Starting QM immediately (QM_IDLE      )
267911: Sep 10 10:32:50.560 Warsaw: ISAKMP:(1182):beginning Quick Mode exchange, M-ID of 1335917093
267912: Sep 10 10:32:50.560 Warsaw: ISAKMP:(1182):QM Initiator gets spi
267913: Sep 10 10:32:50.560 Warsaw: ISAKMP:(1182): sending packet to xxx my_port 500 peer_port 500 (I) QM_IDLE
267914: Sep 10 10:32:50.560 Warsaw: ISAKMP:(1182):Sending an IKE IPv4 Packet.
267916: Sep 10 10:32:50.560 Warsaw: ISAKMP:(1182):Node 1335917093, Input = IKE_MESG_INTERNAL, IKE_INIT_QM
267917: Sep 10 10:32:50.560 Warsaw: ISAKMP:(1182):Old State = IKE_QM_READY  New State = IKE_QM_I_QM1
267918: Sep 10 10:32:50.580 Warsaw: ISAKMP (1182): received packet from xxx dport 500 sport 500 Global (I) QM_IDLE
267919: Sep 10 10:32:50.580 Warsaw: ISAKMP: set new node 1322130921 to QM_IDLE
267920: Sep 10 10:32:50.580 Warsaw: ISAKMP:(1182): processing HASH payload. message ID = 1322130921
267921: Sep 10 10:32:50.580 Warsaw: ISAKMP:(1182): processing NOTIFY PROPOSAL_NOT_CHOSEN protocol 3
        spi 3652764805, message ID = 1322130921, sa = 0x325D0E60
267922: Sep 10 10:32:50.580 Warsaw: ISAKMP:(1182): deleting spi 3652764805 message ID = 1335917093
267923: Sep 10 10:32:50.580 Warsaw: ISAKMP:(1182):deleting node 1335917093 error TRUE reason "Delete Larval"
267924: Sep 10 10:32:50.580 Warsaw: ISAKMP:(1182):deleting node 1322130921 error FALSE reason "Informational (in) state 1"
267925: Sep 10 10:32:50.580 Warsaw: ISAKMP:(1182):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
267926: Sep 10 10:32:50.580 Warsaw: ISAKMP:(1182):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE

 

I guess something wrong with phase2. Please help.

 

Regards

Everyone's tags (1)
2 REPLIES
Community Member

Can you share your tunnel

Can you share your tunnel interface configuration and crypto configuration from both peers?

Community Member

Thank you for response, I

Thank you for response, I found issue. Router didn't have boot sequence configured and it started with different iOS image. Casue of this one code line was missed after reboot.

Regards

99
Views
0
Helpful
2
Replies
CreatePlease to create content