Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

UNABLE to set IPSEC

Hello Team

Please give info on following error

12:37:40: %IKEV2-5-SA_REJECTED_LIMIT_REACHED: SA request rejected due to CAC limit reached:Rejection reason: OUTGOING SA LIMIT REACHED

RTR# #sh version
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.4(3)M3, RELEASE SOFTWARE (fc2)

Everyone's tags (1)
2 REPLIES
Cisco Employee

Hi subhash1333,

Hi subhash1333,

Looks like you have a Call Admission Control for IKE, can you share the following command:

show crypto call admission statistics

You can follow this guide to modify the limit of SAs:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ikevpn/configuration/15-mt/sec-ike-for-ipsec-vpns-15-mt-book/sec-call-addmsn-ike.html#GUID-267E909F-C528-4A8A-9B69-DEDDE6F4C0AA

Hope this info helps!!

Rate if helps you!! 

-JP-

New Member

Hello JP

Hello JP

Thanks a lot

Subhash

91
Views
0
Helpful
2
Replies