UNABLE to set IPSEC

[subhash1333]

Hello Team

Please give info on following error

12:37:40: %IKEV2-5-SA_REJECTED_LIMIT_REACHED: SA request rejected due to CAC limit reached:Rejection reason: OUTGOING SA LIMIT REACHED

RTR# #sh version
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.4(3)M3, RELEASE SOFTWARE (fc2)

[JP Miranda Z]

Hi subhash1333,

Looks like you have a Call Admission Control for IKE, can you share the following command:

show crypto call admission statistics

You can follow this guide to modify the limit of SAs:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ikevpn/configuration/15-mt/sec-ike-for-ipsec-vpns-15-mt-book/sec-call-addmsn-ike.html#GUID-267E909F-C528-4A8A-9B69-DEDDE6F4C0AA

Hope this info helps!!

Rate if helps you!! 

-JP-

[subhash1333]

Hello JP

Thanks a lot

Subhash