Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VPN between forti and cisco router

Hi

We are trying to establish vpn connection between the fortigate and cisco router. I took the debugs from the router. Two sites cannot ping each other. What can be the problem ?

Regards.

*Dec 12 08:08:25.259: ISAKMP:(2007):DPD/R_U_THERE received from peer x.x.x.x, sequence 0x8864

*Dec 12 08:08:25.259: ISAKMP: set new node 1318791209 to QM_IDLE

*Dec 12 08:08:25.259: ISAKMP:(2007):Sending NOTIFY DPD/R_U_THERE_ACK protocol                               1

        spi 2281221272, message ID = 1318791209

*Dec 12 08:08:25.259: ISAKMP:(2007): seq. no 0x8864

*Dec 12 08:08:25.259: ISAKMP:(2007): sending packet to x.x.x.x my_port                               500 peer_port 500 (R) QM_IDLE

*Dec 12 08:08:25.259: ISAKMP:(2007):Sending an IKE IPv4 Packet.

*Dec 12 08:08:25.259: ISAKMP:(2007):purging node 1318791209

*Dec 12 08:08:25.259: ISAKMP:(2007):Input = IKE_MESG_FROM_PEER, IKE_MESG_KEEP_ALIVE

*Dec 12 08:08:25.259: ISAKMP:(2007):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE

*Dec 12 08:08:26.571: ISAKMP:(2006):purging node 152745446

*Dec 12 08:08:28.831: ISAKMP:(2007): retransmitting phase 2 QM_IDLE       1418764072 ...

*Dec 12 08:08:28.831: ISAKMP (2007): incrementing error counter on node, attempt 2 of 5: retransmit phase 2

*Dec 12 08:08:28.831: ISAKMP (2007): incrementing error counter on sa, attempt 2 of 5: retransmit phase 2

*Dec 12 08:08:28.831: ISAKMP:(2007): retransmitting phase 2 1418764072 QM_IDLE

*Dec 12 08:08:28.831: ISAKMP:(2007): sending packet to x.x.x.x my_port 500 peer_port 500 (R) QM_IDLE

*Dec 12 08:08:28.831: ISAKMP:(2007):Sending an IKE IPv4 Packet.

*Dec 12 08:08:30.279: ISAKMP (2007): received packet from x.x.x.x dport 500 sport 500 Global (R) QM_IDLE

*Dec 12 08:08:30.279: ISAKMP: set new node -1205940881 to QM_IDLE

*Dec 12 08:08:30.279: ISAKMP:(2007): processing HASH payload. message ID = 3089026415

*Dec 12 08:08:30.279: ISAKMP:(2007): processing NOTIFY DPD/R_U_THERE protocol 1

        spi 0, message ID = 3089026415, sa = 0x89305EA4

*Dec 12 08:08:30.279: ISAKMP:(2007):deleting node -1205940881 error FALSE reason "Informational (in) state 1"

*Dec 12 08:08:30.279: ISAKMP:(2007):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY

*Dec 12 08:08:30.279: ISAKMP:(2007):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE

*Dec 12 08:08:30.279: ISAKMP:(2007):DPD/R_U_THERE received from peer x.x.x.x, sequence 0x8865

*Dec 12 08:08:30.279: ISAKMP: set new node 80425022 to QM_IDLE

*Dec 12 08:08:30.279: ISAKMP:(2007):Sending NOTIFY DPD/R_U_THERE_ACK protocol 1

        spi 2281221272, message ID = 80425022

*Dec 12 08:08:30.279: ISAKMP:(2007): seq. no 0x8865

*Dec 12 08:08:30.279: ISAKMP:(2007): sending packet to x.x.x.x my_port 500 peer_port 500 (R) QM_IDLE

*Dec 12 08:08:30.279: ISAKMP:(2007):Sending an IKE IPv4 Packet.

*Dec 12 08:08:30.279: ISAKMP:(2007):purging node 80425022

*Dec 12 08:08:30.279: ISAKMP:(2007):Input = IKE_MESG_FROM_PEER, IKE_MESG_KEEP_ALIVE

*Dec 12 08:08:30.279: ISAKMP:(2007):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE

*Dec 12 08:08:31.591: ISAKMP:(2006):purging node -1552865220

*Dec 12 08:08:35.299: ISAKMP (2007): received packet from x.x.x.x dport 500 sport 500 Global (R) QM_IDLE

*Dec 12 08:08:35.299: ISAKMP: set new node -1008649029 to QM_IDLE

*Dec 12 08:08:35.299: ISAKMP:(2007): processing HASH payload. message ID = 3286318267

*Dec 12 08:08:35.299: ISAKMP:(2007): processing NOTIFY DPD/R_U_THERE protocol 1

        spi 0, message ID = 3286318267, sa = 0x89305EA4

*Dec 12 08:08:35.299: ISAKMP:(2007):deleting node -1008649029 error FALSE reason "Informational (in) state 1"

*Dec 12 08:08:35.299: ISAKMP:(2007):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY

*Dec 12 08:08:35.299: ISAKMP:(2007):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE

*Dec 12 08:08:35.299: ISAKMP:(2007):DPD/R_U_THERE received from peer x.x.x.x, sequence 0x8866

*Dec 12 08:08:35.299: ISAKMP: set new node 201958388 to QM_IDLE

*Dec 12 08:08:35.299: ISAKMP:(2007):Sending NOTIFY DPD/R_U_THERE_ACK protocol 1

        spi 2281221272, message ID = 201958388

*Dec 12 08:08:35.299: ISAKMP:(2007): seq. no 0x8866

*Dec 12 08:08:35.299: ISAKMP:(2007): sending packet to x.x.x.x my_port 500 peer_port 500 (R) QM_IDLE

*Dec 12 08:08:35.299: ISAKMP:(2007):Sending an IKE IPv4 Packet.

*Dec 12 08:08:35.299: ISAKMP:(2007):purging node 201958388

*Dec 12 08:08:35.299: ISAKMP:(2007):Input = IKE_MESG_FROM_PEER, IKE_MESG_KEEP_ALIVE

*Dec 12 08:08:35.299: ISAKMP:(2007):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE

*Dec 12 08:08:38.831: ISAKMP:(2007): retransmitting phase 2 QM_IDLE       1418764072 ...

*Dec 12 08:08:38.831: ISAKMP (2007): incrementing error counter on node, attempt 3 of 5: retransmit phase 2

*Dec 12 08:08:38.831: ISAKMP (2007): incrementing error counter on sa, attempt 3 of 5: retransmit phase 2

*Dec 12 08:08:38.831: ISAKMP:(2007): retransmitting phase 2 1418764072 QM_IDLE

*Dec 12 08:08:38.831: ISAKMP:(2007): sending packet to x.x.x.x my_port 500 peer_port 500 (R) QM_IDLE

*Dec 12 08:08:38.831: ISAKMP:(2007):Sending an IKE IPv4 Packet.

*Dec 12 08:08:39.019: ISAKMP:(2006):purging node 1504809214

*Dec 12 08:08:39.051: ISAKMP:(2006):purging node -1926346508

*Dec 12 08:08:39.051: ISAKMP:(2006):purging node 381551159

*Dec 12 08:08:40.339: ISAKMP (2007): received packet from x.x.x.x dport 500 sport 500 Global (R) QM_IDLE

*Dec 12 08:08:40.339: ISAKMP: set new node -304747723 to QM_IDLE

*Dec 12 08:08:40.339: ISAKMP:(2007): processing HASH payload. message ID = 3990219573

*Dec 12 08:08:40.339: ISAKMP:(2007): processing NOTIFY DPD/R_U_THERE protocol 1

        spi 0, message ID = 3990219573, sa = 0x89305EA4

*Dec 12 08:08:40.339: ISAKMP:(2007):deleting node -304747723 error FALSE reason "Informational (in) state 1"

*Dec 12 08:08:40.339: ISAKMP:(2007):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY

*Dec 12 08:08:40.339: ISAKMP:(2007):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE

*Dec 12 08:08:40.339: ISAKMP:(2007):DPD/R_U_THERE received from peer x.x.x.x, sequence 0x8867

*Dec 12 08:08:40.339: ISAKMP: set new node 1368784091 to QM_IDLE

*Dec 12 08:08:40.339: ISAKMP:(2007):Sending NOTIFY DPD/R_U_THERE_ACK protocol 1

        spi 2281221272, message ID = 1368784091

*Dec 12 08:08:40.339: ISAKMP:(2007): seq. no 0x8867

*Dec 12 08:08:40.339: ISAKMP:(2007): sending packet to x.x.x.x my_port 500 peer_port 500 (R) QM_IDLE

*Dec 12 08:08:40.339: ISAKMP:(2007):Sending an IKE IPv4 Packet.

*Dec 12 08:08:40.339: ISAKMP:(2007):purging node 1368784091

*Dec 12 08:08:40.339: ISAKMP:(2007):Input = IKE_MESG_FROM_PEER, IKE_MESG_KEEP_ALIVE

*Dec 12 08:08:40.339: ISAKMP:(2007):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE

*Dec 12 08:08:45.139: ISAKMP:(2007):purging node 1491781615

*Dec 12 08:08:45.355: ISAKMP (2007): received packet from x.x.x.x dport 500 sport 500 Global (R) QM_IDLE

*Dec 12 08:08:45.359: ISAKMP: set new node 349615439 to QM_IDLE

*Dec 12 08:08:45.359: ISAKMP:(2007): processing HASH payload. message ID = 349615439

*Dec 12 08:08:45.359: ISAKMP:(2007): processing NOTIFY DPD/R_U_THERE protocol 1

        spi 0, message ID = 349615439, sa = 0x89305EA4

*Dec 12 08:08:45.359: ISAKMP:(2007):deleting node 349615439 error FALSE reason "Informational (in) state 1"

*Dec 12 08:08:45.359: ISAKMP:(2007):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY

*Dec 12 08:08:45.359: ISAKMP:(2007):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE

*Dec 12 08:08:45.359: ISAKMP:(2007):DPD/R_U_THERE received from peer x.x.x.x, sequence 0x8868

*Dec 12 08:08:45.359: ISAKMP: set new node 741029994 to QM_IDLE

*Dec 12 08:08:45.359: ISAKMP:(2007):Sending NOTIFY DPD/R_U_THERE_ACK protocol 1

        spi 2281221272, message ID = 741029994

*Dec 12 08:08:45.359: ISAKMP:(2007): seq. no 0x8868

*Dec 12 08:08:45.359: ISAKMP:(2007): sending packet to x.x.x.x my_port 500 peer_port 500 (R) QM_IDLE

*Dec 12 08:08:45.359: ISAKMP:(2007):Sending an IKE IPv4 Packet.

*Dec 12 08:08:45.359: ISAKMP:(2007):purging node 741029994

*Dec 12 08:08:45.359: ISAKMP:(2007):Input = IKE_MESG_FROM_PEER, IKE_MESG_KEEP_ALIVE

*Dec 12 08:08:45.359: ISAKMP:(2007):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE

*Dec 12 08:08:48.831: ISAKMP:(2007): retransmitting phase 2 QM_IDLE       1418764072 ...

*Dec 12 08:08:48.831: ISAKMP (2007): incrementing error counter on node, attempt 4 of 5: retransmit phase 2

*Dec 12 08:08:48.831: ISAKMP (2007): incrementing error counter on sa, attempt 4 of 5: retransmit phase 2

*Dec 12 08:08:48.831: ISAKMP:(2007): retransmitting phase 2 1418764072 QM_IDLE

*Dec 12 08:08:48.831: ISAKMP:(2007): sending packet to x.x.x.x my_port 500 peer_port 500 (R) QM_IDLE

*Dec 12 08:08:48.831: ISAKMP:(2007):Sending an IKE IPv4 Packet.

*Dec 12 08:08:49.051: ISAKMP:(2006):purging SA., sa=88D60EB4, delme=88D60EB4un a

*Dec 12 08:08:50.159: ISAKMP:(2007):purging node -1329665223

*Dec 12 08:08:50.375: ISAKMP (2007): received packet from x.x.x.x dport 500 sport 500 Global (R) QM_IDLE

*Dec 12 08:08:50.375: ISAKMP: set new node 1079533099 to QM_IDLE

*Dec 12 08:08:50.379: ISAKMP:(2007): processing HASH payload. message ID = 1079533099

*Dec 12 08:08:50.379: ISAKMP:(2007): processing NOTIFY DPD/R_U_THERE protocol 1

        spi 0, message ID = 1079533099, sa = 0x89305EA4

*Dec 12 08:08:50.379: ISAKMP:(2007):deleting node 1079533099 error FALSE reason "Informational (in) state 1"

*Dec 12 08:08:50.379: ISAKMP:(2007):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY

*Dec 12 08:08:50.379: ISAKMP:(2007):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE

*Dec 12 08:08:50.379: ISAKMP:(2007):DPD/R_U_THERE received from peer x.x.x.x, sequence 0x8869

*Dec 12 08:08:50.379: ISAKMP: set new node 1444906573 to QM_IDLE

*Dec 12 08:08:50.379: ISAKMP:(2007):Sending NOTIFY DPD/R_U_THERE_ACK protocol 1

        spi 2281221272, message ID = 1444906573

*Dec 12 08:08:50.379: ISAKMP:(2007): seq. no 0x8869

*Dec 12 08:08:50.379: ISAKMP:(2007): sending packet to x.x.x.x my_port 500 peer_port 500 (R) QM_IDLE

*Dec 12 08:08:50.379: ISAKMP:(2007):Sending an IKE IPv4 Packet.

*Dec 12 08:08:50.379: ISAKMP:(2007):purging node 1444906573ll

*Dec 12 08:08:50.379: ISAKMP:(2007):Input = IKE_MESG_FROM_PEER, IKE_MESG_KEEP_ALIVE

*Dec 12 08:08:50.379: ISAKMP:(2007):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE

507
Views
0
Helpful
0
Replies