-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi Guys,
We've quite a few VPN running to different customers location on multiple
routers. They all work fine but with one of the we are from time to time
experiencing problems.
For whatever reason the VPN goes down and does not come up unless I reset the
router itself.
All the clear crypto commands do not seem to work
Unfortunately I do not have access to the remote ASA we use a 2801 with a
crypto map on the nat outside interface.
The only thing I've not tried so far is re-enter the pre-shared keys. But
that also does not explain why the VPN goes down in the first place.
It really happens on a irregular basis. Sometimes is happens twice a week and
sometimes we are without problems for a over half a year.
It looks like the problem is in the ISAKMP see attached debugging.
Does anybody have any idea what is causing this issue?
Regards,
Mike
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
iD8DBQFI0h0dwyjwCtsMkuMRAsJ6AKCk31AHy/gU1SvyzWWWFMkIQNiqJgCbB016
aB8Jr/90F6/eh6nrfJGtIyo=
=mLuQ
-----END PGP SIGNATURE-----
.Sep 18 09:57:50.693 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.Sep 18 09:57:50.693 MEST: ISAKMP (0:0): incrementing error counter on sa,
attempt 1 of 5: retransmit phase 1
.Sep 18 09:57:50.693 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.Sep 18 09:57:50.693 MEST: ISAKMP:(0): sending packet to x.x.x.x my_port 500
peer_port 500 (I) MM_NO_STATE
.Sep 18 09:57:50.693 MEST: ISAKMP:(0):Sending an IKE IPv4 Packet.
.Sep 18 09:57:51.165 MEST: ISAKMP:(0):purging SA., sa=65F5B2A8, delme=65F5B2A8
.Sep 18 09:57:51.169 MEST: ISAKMP:(0):purging SA., sa=65F1BCBC, delme=65F1BCB
.Sep 18 09:57:51.885 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.Sep 18 09:57:51.885 MEST: ISAKMP (0:0): incrementing error counter on sa,
attempt 1 of 5: retransmit phase 1
.Sep 18 09:57:51.885 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.Sep 18 09:57:51.885 MEST: ISAKMP:(0): sending packet to y.y.y.y my_port 500
peer_port 500 (I) MM_NO_STATE
.Sep 18 09:57:51.885 MEST: ISAKMP:(0):Sending an IKE IPv4 Packet.
.Sep 18 09:57:55.936 MEST: ISAKMP: set new node 0 to QM_IDLE
.Sep 18 09:57:55.936 MEST: ISAKMP:(0):SA is still budding. Attached new ipsec
request to it. (local z.z.z.z, remote y.y.y.y)
.Sep 18 09:57:55.936 MEST: ISAKMP: Error while processing SA request: Failed to
initialize SA
.Sep 18 09:57:55.936 MEST: ISAKMP: Error while processing KMI message 0, error
2.
.Sep 18 09:57:56.708 MEST: ISAKMP: set new node 0 to QM_IDLE
.Sep 18 09:57:56.708 MEST: ISAKMP:(0):SA is still budding. Attached new ipsec
request to it. (local z.z.z.z, remote y.y.y.y)
.Sep 18 09:57:56.708 MEST: ISAKMP: Error while processing SA request: Failed to
initialize SA
.Sep 18 09:57:56.708 MEST: ISAKMP: Error while processing KMI message 0, error
2.
.Sep 18 09:58:00.696 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.Sep 18 09:58:00.696 MEST: ISAKMP (0:0): incrementing error counter on sa,
attempt 2 of 5: retransmit phase 1
.Sep 18 09:58:00.696 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.Sep 18 09:58:00.696 MEST: ISAKMP:(0): sending packet to x.x.x.x my_port 500
peer_port 500 (I) MM_NO_STATE
.Sep 18 09:58:00.696 MEST: ISAKMP:(0):Sending an IKE IPv4 Packet.
.Sep 18 09:58:01.884 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.Sep 18 09:58:01.884 MEST: ISAKMP (0:0): incrementing error counter on sa,
attempt 2 of 5: retransmit phase 1
.Sep 18 09:58:01.884 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.Sep 18 09:58:01.884 MEST: ISAKMP:(0): sending packet to y.y.y.y my_port 500
peer_port 500 (I) MM_NO_STATE
.Sep 18 09:58:01.884 MEST: ISAKMP:(0):Sending an IKE IPv4 Packet.
.Sep 18 09:58:10.688 MEST: ISAKMP: set new node 0 to QM_IDLE
.Sep 18 09:58:10.688 MEST: ISAKMP:(0):SA is still budding. Attached new ipsec
request to it. (local z.z.z.z, remote x.x.x.x)
.Sep 18 09:58:10.688 MEST: ISAKMP: Error while processing SA request: Failed to
initialize SA
.Sep 18 09:58:10.688 MEST: ISAKMP: Error while processing KMI message 0, error
2.
.Sep 18 09:58:10.696 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.Sep 18 09:58:10.696 MEST: ISAKMP (0:0): incrementing error counter on sa,
attempt 3 of 5: retransmit phase 1
.Sep 18 09:58:10.696 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.Sep 18 09:58:10.696 MEST: ISAKMP:(0): sending packet to x.x.x.x my_port 500
peer_port 500 (I) MM_NO_STATE
.Sep 18 09:58:10.696 MEST: ISAKMP:(0):Sending an IKE IPv4 Packet.
.Sep 18 09:58:11.760 MEST: ISAKMP: set new node 0 to QM_IDLE
.Sep 18 09:58:11.760 MEST: ISAKMP:(0):SA is still budding. Attached new ipsec
request to it. (local z.z.z.z, remote x.x.x.x)
.Sep 18 09:58:11.760 MEST: ISAKMP: Error while processing SA request: Failed to
initialize SA
.Sep 18 09:58:11.760 MEST: ISAKMP: Error while processing KMI message 0, error
2.
.Sep 18 09:58:11.880 MEST: ISAKMP: set new node 0 to QM_IDLE
.Sep 18 09:58:11.880 MEST: ISAKMP:(0):SA is still budding. Attached new ipsec
request to it. (local z.z.z.z, remote y.y.y.y)
.Sep 18 09:58:11.880 MEST: ISAKMP: Error while processing SA request: Failed to
initialize SA
.Sep 18 09:58:11.880 MEST: ISAKMP: Error while processing KMI message 0, error
2.
.Sep 18 09:58:11.884 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.Sep 18 09:58:11.884 MEST: ISAKMP (0:0): incrementing error counter on sa,
attempt 3 of 5: retransmit phase 1
.Sep 18 09:58:11.884 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.Sep 18 09:58:11.884 MEST: ISAKMP:(0): sending packet to y.y.y.y my_port 500
peer_port 500 (I) MM_NO_STATE
.Sep 18 09:58:11.884 MEST: ISAKMP:(0):Sending an IKE IPv4 Packet.
.Sep 18 09:58:13.960 MEST: ISAKMP: set new node 0 to QM_IDLE
.Sep 18 09:58:13.960 MEST: ISAKMP:(0):SA is still budding. Attached new ipsec
request to it. (local z.z.z.z, remote x.x.x.x)
.Sep 18 09:58:13.960 MEST: ISAKMP: Error while processing SA request: Failed to
initialize SA
.Sep 18 09:58:13.964 MEST: ISAKMP: Error while processing KMI message 0, error
2.
.Sep 18 09:58:15.080 MEST: ISAKMP: set new node 0 to QM_IDLE
.Sep 18 09:58:15.080 MEST: ISAKMP:(0):SA is still budding. Attached new ipsec
request to it. (local z.z.z.z, remote x.x.x.x)
.Sep 18 09:58:15.080 MEST: ISAKMP: Error while processing SA request: Failed to
initialize SA
.Sep 18 09:58:15.080 MEST: ISAKMP: Error while processing KMI message 0, error
2.
.Sep 18 09:58:15.288 MEST: ISAKMP: set new node 0 to QM_IDLE
.Sep 18 09:58:15.288 MEST: ISAKMP:(0):SA is still budding. Attached new ipsec
request to it. (local z.z.z.z, remote x.x.x.x)
.Sep 18 09:58:15.288 MEST: ISAKMP: Error while processing SA request: Failed to
initialize SA
.Sep 18 09:58:15.288 MEST: ISAKMP: Error while processing KMI message 0, error
2.
.Sep 18 09:58:16.304 MEST: ISAKMP: set new node 0 to QM_IDLE
.Sep 18 09:58:16.304 MEST: ISAKMP:(0):SA is still budding. Attached new ipsec
request to it. (local z.z.z.z, remote y.y.y.y)
.Sep 18 09:58:16.304 MEST: ISAKMP: Error while processing SA request: Failed to
initialize SA
.Sep 18 09:58:16.304 MEST: ISAKMP: Error while processing KMI message 0, error
2.
.Sep 18 09:58:20.696 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.Sep 18 09:58:20.696 MEST: ISAKMP (0:0): incrementing error counter on sa,
attempt 4 of 5: retransmit phase 1
.Sep 18 09:58:20.696 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.Sep 18 09:58:20.696 MEST: ISAKMP:(0): sending packet to x.x.x.x my_port 500
peer_port 500 (I) MM_NO_STATE
.Sep 18 09:58:20.696 MEST: ISAKMP:(0):Sending an IKE IPv4 Packet.
.Sep 18 09:58:21.884 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.Sep 18 09:58:21.884 MEST: ISAKMP (0:0): incrementing error counter on sa,
attempt 4 of 5: retransmit phase 1
.Sep 18 09:58:21.884 MEST: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.Sep 18 09:58:21.884 MEST: ISAKMP:(0): sending packet to y.y.y.y my_port 500
peer_port 500 (I) MM_NO_STATE
.Sep 18 09:58:21.884 MEST: ISAKMP:(0):Sending an IKE IPv4 Packet.
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
