Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Error bring up a GRE tunnel

Hey all I am trying to bring up a tunnel between to 871s and I having an issue. The tunnel is up and up but I am getting this error.

%CRYPTO-4-IKMP_NO_SA: IKE message from has no SA and is not an initialization offer

any thoughts

Hall of Fame Super Gold

Re: Error bring up a GRE tunnel

New Member

Re: Error bring up a GRE tunnel

running c870-advipservicesk9-mz.124-15.T7

I will look over the links and let you know what I find. thanxs

Hall of Fame Super Silver

Re: Error bring up a GRE tunnel


I am not sure that this is cosmetic. The error indicates that your router received an ISAKMP message from its peer but the router does not have an SA that corresponds to it.

I have seen this error message when routers had established the IPSec and ISAKMP relationship (including SAs) and then one of the peers reboots. The peer who did not reboot continues to send ISAKMP packets but the router that did reboot no longer has an SA for that peer.

Is it possible that your router has recently rebooted when you see these messages?

Do the routers involved in this generally transmit traffic to each other successfully?

If it is still an active issue you might post the configs from both routers. It might also help to post the output from show crypto isakmp to display the SAs of both routers.