IPSec issue on ISR4221

[mtmharison]

Hi,

The IPSec sa on my ISR 4221 can't be established and I have the below repetitive log message :

%ACE-3-TRANSERR: IOSXE-ESP(9): IKEA trans 0x73E; opcode 0x60; param 0x39C; error 0x5; retry cnt 0

what does it mean?

Regards,

Harison

[balaji.bandi]

Suggestions are here :

1. what is the version of IOS code running. (post show version)

2. can you check both the side configuration are identical part of VPN config.

if all ok, i see some bug was reported here, not able to find the details full, but mentioned some version fixed, check with against your version.

https://community.cisco.com/t5/vpn-and-anyconnect/cisco-bug-csctc78745/td-p/1968089

[mtmharison · Accepted solution]

it seems that I don't have the same encryption and hash algorithm in my new and the existing routers