Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

IKE error between ASA 5510 and CISCO 3015

Hi

I'm tryning to establish a L2L connection with a customer, my equipment is a ASA 5510 8.0(2)

After the command show isakmp sa, i have the following reply

Active SA: 1

Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)

Total IKE SA: 1

With a debug crypto isakmp 25

smbasa5510-01# Oct 31 11:39:26 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0

Oct 31 11:39:26 [IKEv1]: IP = 217.70.85.44, Queuing KEY-ACQUIRE messages to be processed when P1 SA is complete.

Oct 31 11:39:27 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0

Oct 31 11:39:27 [IKEv1]: IP = 217.70.85.44, Queuing KEY-ACQUIRE messages to be processed when P1 SA is complete.

Oct 31 11:39:29 [IKEv1]: IP = 217.70.85.44, IKE_DECODE RESENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + NONE (0) total length : 152

Oct 31 11:39:29 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0

Oct 31 11:39:29 [IKEv1]: IP = 217.70.85.44, Queuing KEY-ACQUIRE messages to be processed when P1 SA is complete.

1 REPLY
Cisco Employee

Re: IKE error between ASA 5510 and CISCO 3015

Hi,

Can you check the Preshared Key on both the sides and make sure its the same.

Regards,

Arul

*Pls rate if it helps*

318
Views
0
Helpful
1
Replies
CreatePlease login to create content