Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Site to Site VPN getspi error

Hi,

My site to site VPN is failing with these error message.

Using IPsec SA configuration: 172.28.0.0/16<->192.168.100.0/28

[IKE] INFO:  Configuration found for 209.87.231.245.

[IKE] INFO:  Configuration found for 209.87.231.245.

[IKE] INFO:  Initiating new phase 2 negotiation: 209.183.24.116[0]<=>209.87.231.245[0]

[IKE] ERROR:  encryption 7 failed.

[IKE] ERROR:  failed to start post getspi.

[IKE] INFO:  an undead schedule has been deleted: 'quick_i1prep'

Looks like something is hung at the ASA side, is there a way to clear the tunnel or the problem bigger then I think...

Thank you for your help.

Everyone's tags (2)
2 REPLIES
New Member

Site to Site VPN getspi error

Hi

please check the configration about the ipsec phase 2 transformset .

I think there is some miss about the configtration .

Would you share your configration of the ASA?

New Member

Re: Site to Site VPN getspi error

Hi,

I rebooted both Firewall this morning and site to site is up and working.

565
Views
0
Helpful
2
Replies