Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
bsc
New Member

Need Help in understanding IPSEC/ISAKMP debug messages

Hello,

I am checking some debug messages and fell over the ones below (sorry for the long debug).

What really puzzles me, is that the router builds a new ISAKMP and then a little time later he tears it down again.

Nov 24 12:23:12.017: ISAKMP: set new node 374015275 to QM_IDLE

[...]

Nov 24 12:23:12.081: ISAKMP:(0:1:HW:2):deleting node 374015275 error FALSE reason "QM done (await)"

Nov 24 12:23:12.081: ISAKMP:(0:1:HW:2):Node 374015275, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Nov 24 12:23:12.081: ISAKMP:(0:1:HW:2):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE

Nov 24 12:24:02.082: ISAKMP:(0:1:HW:2):purging node 374015275

To me with my limited IPSec experience this looks like a problem, but it works fine and the SAs look fine.

Does anyone have a pointer on what's going on or a link to a document, that explains it?

Thanks

-birgit

1 REPLY

Re: Need Help in understanding IPSEC/ISAKMP debug messages

Hi

Would suggest to use this link to decode out out the exact meaning for the logged lines ...

http://www.cisco.com/cgi-bin/Support/Errordecoder/index.cgi

regd

649
Views
0
Helpful
1
Replies
CreatePlease to create content