topic Re: VPN tunnel debug out put in Network Security

VPN tunnel debug out put

bapatsubodh — Fri, 21 Feb 2020 09:25:23 GMT

Hi,

We are facing some problem with VPN tunnel from router to router.

We are forming tunnel from R1 to R2 on loopback address. It was working ok and suddenly it is showing status as down.

I am attaching debug cry ipsec output here in text mode.

Here we suspect :

Feb 26 11:02:40.779: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!

Coincidently it was working and suddenly gone down.

Thanks and advance

Subodh

Re: VPN tunnel debug out put

kaachary — Mon, 26 Feb 2007 09:49:12 GMT

Hi,

The Phase 1 attributes are matching, so thats not an issue. It seems to be an issue with the pre-shared key.

Try resetting pre-shared key on both the ends.

Hope this helps.

-Kanishka

Re: VPN tunnel debug out put

Kamal Malhotra — Thu, 08 Mar 2007 15:13:54 GMT

Hi,

As per the debugs, it seems that you are using certs for the authentication which is failing and a possible reason is the cert on one end has expired. Please check the validity of the cert.

HTH,

Please rate if it helps,

Regards,

Kamal

Re: VPN tunnel debug out put

puagarwa — Wed, 21 Mar 2007 00:29:54 GMT

I think the phase 1 policies are not configured on the router whose debugs are attached, do you really wanna do isakmp authentication with certificates or you have pre-shared key configured? please configure the phase 1 policy matching teh remote peer.

what re the debugs on the remote peer, is it possible for you paste the config on both the sides??