hey man thanks for the response now man i have another issue is that the show crypto isakmp sa is showing that the tunnel is up QM_IDLE but i cannot ping the other side and it was working normally and i see in the log message that there is "it is temporarly disabled due to recursive routing"
Date: Mon, 9 Aug 2010 11:42:05 +0200 From: [email protected] To: [email protected] Subject: Re: [c-nsp] Site to Site VPN Hi, > what is the possible solution to solve this issue ? > IKE message from x.x.x.x has no SA and is not an initialization offer Probably reset of VPN on the other side. This message is commonly seen a when one side of vpn reloads. The other side just does not know that association is not valid any more. If this is persistent problem and the VPN cannot establish itself, then capture some debugs a sent them in, just this error message is not sufficient to draw any conclusions. Otherwise just ignore it, it is correct behaviour. Best regards, Jan _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
