I'm having issues getting one of my backup hub routers tunnel come up after 24 hours of connection time.
The router worked nicely before I changed the WAN interface from a switch interface to the WAN interface on my 881. It worked as a trunk with vlan 7 configured for VDSL connected to a modem. Now the modem handles the VLAN and the proper WAN interface is used.
Every 24 hours the the DMVPN turns into "IKE" state and doesn't come up again. I need to reload the router and everything is fine again for 24 hours.
Please give me a hint. I already copied the configuration from my primary hub except some details like IP adresses but still no joy.
I attached the configs of the primary and secondary hub.
A debug crypto isakmp mentions MM_NO_STATE - I will post more tomorrow when the problem occurs again.
Ok here's a debug crypto isakmp. It might me important to notice that the primary hub doesn't receive any packets when doing a debug crypto isakmp. But why does it work when restarting the secondary hub ?
Jan 28 22:40:21.694: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.Jan 28 22:40:21.694: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
I used "debug ip udp address 87.138.xxx.xxx" on the primary hub router to check if there is isakmp traffic coming in...no it does not even though the secondary hub sends IKE messages as you can see in the above output of "debug crypto isakmp".
When I ping the primary hub from the secondary there is icmp traffic being blocked so traffic is arriving. No block messages for isakmp...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...