Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN Concentrator 3030, troubleshooting problem

hi,

i have concentrator 3030 model.

i receive following error in the log files while establishing the site-to-site vpn tunnel

IKE MM Initiator FSM error history

i am unable to get any informtaion on this . there are further errors which ain't getting me any information.

26137,07/23/2006,18:28:06.630,SEV=4,IKE/41,RPT=4319,198.241.23.14,IKE Initiator: New Phase 1 Intf 3 IKE Peer 198.241.23.14local Proxy Address 28.29.25.0 remote Proxy Address 199.53.28.124 SA (L2L: CS)

Kindly tell me if any one know of this.

2 REPLIES
Silver

Re: VPN Concentrator 3030, troubleshooting problem

Your "Main Mode" IKE negotiations are failing. Check your IKE proposals to match on both ends.

Cisco Employee

Re: VPN Concentrator 3030, troubleshooting problem

MM = Main Mode, FSM = Finite State Machine

In this event there will usually be some other information the represents the state machine condition the generated the message. Usually the events prior to this one will give you a better idea of what caused the message - not always a failure indication, sometimes just a result.

The second event represents the concentrator is trying to bring up a L2L tunnel; the the 3k is initiating the connection to a defined peer based on receiving interesting traffic - shows the local subnet sending and the remote subnet that should be receiving (proxy). There was no tunnel to carry the traffic so the 3k is trying to build one.

335
Views
0
Helpful
2
Replies
CreatePlease to create content