topic RA VPN ph2 not working- Removing peer from correlator table fail in Network Security

RA VPN ph2 not working- Removing peer from correlator table failed, no match

Abhishek Nagar — Tue, 12 Mar 2019 02:45:12 GMT

Dear Colleagues

Please suggest the missing configuration- ASA 5525, 9.1 sw

I am getting below syslog, with debug crypto isakmp

Sep 30 16:17:47 [IKEv1]Group = defaultragroup, Username = myvpn, IP = 213.133.216.168, QM FSM error (P2 struct &0x00007ffecc8423a0, mess id 0x8f389b93)!

Sep 30 16:17:47 [IKEv1]Group = defaultragroup, Username = myvpn, IP = 213.133.216.168, Removing peer from correlator table failed, no match!

Sep 30 16:17:47 [IKEv1]Group = defaultragroup, Username = myvpn, IP = 213.133.216.168, Session is being torn down. Reason: Phase 2 Mismatch

I am attaching

sh run tunnel-group

sh run crypto map

and sh run,

My Access VPN group Policy is defaultragroup

local username is myvpn

ip pool 10.200.41.1-10.200.41.14

RA VPN ph2 not working- Removing peer from correlator table fail

Jouni Forss — Mon, 30 Sep 2013 17:28:35 GMT

Hi,

You could try adding

crypto dynamic-map RAVPNmap 65534 set ikev1 transform-set ESP-3DES-SHA ESP-3DES-MD5

Though I am not sure why there are multiple "dynamic-map" configuration on your ASA to begin with.

- Jouni

RA VPN ph2 not working- Removing peer from correlator table fail

Abhishek Nagar — Tue, 01 Oct 2013 15:30:46 GMT

hello

i found the problem and fix it, thanks for reply

Re: RA VPN ph2 not working- Removing peer from correlator table failed

zizou6500 — Tue, 13 Sep 2022 22:50:04 GMT

Hello Abhishek,

Can you please share the solution?