Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

VPN Error message

Hi,

i created a ipsec tunnel but i'm fail to connect to the Peer side, i enable the debug and found some error but i dunno what is that means? need help!

PNG-FW(config)# Apr 21 18:11:31 [IKEv1]: Group = 147.178.7.132, IP = 147.178.7.1

32, QM FSM error (P2 struct &0xd58c98f8, mess id 0x370de110)!

Apr 21 18:11:31 [IKEv1]: Group = 147.178.7.132, IP = 147.178.7.132, construct_ip

sec_delete(): No SPI to identify Phase 2 SA!

Apr 21 18:11:31 [IKEv1]: Group = 147.178.7.132, IP = 147.178.7.132, Removing pee

r from correlator table failed, no match!

Apr 21 18:12:04 [IKEv1]: Group = 147.178.7.132, IP = 147.178.7.132, QM FSM error

(P2 struct &0xd58c98f8, mess id 0xb7ae6d75)!

Apr 21 18:12:04 [IKEv1]: Group = 147.178.7.132, IP = 147.178.7.132, construct_ip

sec_delete(): No SPI to identify Phase 2 SA!

Apr 21 18:12:04 [IKEv1]: Group = 147.178.7.132, IP = 147.178.7.132, Removing pee

r from correlator table failed, no match!

Thks

-Gilbert

1 REPLY
Silver

Re: VPN Error message

One possible reason is the proxy identities (interesting traffic, Access Control List (ACL) or crypto ACL) are not matching on both the ends.

Check the configuration on both the devices, and make sure that the crypto ACLs match.

163
Views
0
Helpful
1
Replies
CreatePlease to create content