06-05-2007 10:36 AM - edited 03-11-2019 03:25 AM
Trying to establish vpn tunnel between a dynamic ip vpn device and a static ASA. Receiving the following logs...
713902 Group = DefaultRAGroup, IP = 75.x.x.223, Removing peer from peer table failed, no match!
713903 Group = DefaultRAGroup, IP = 75.x.x.223, Error: Unable to remove PeerTblEntry
The group which the shared key matches should be DefaultL2LGroup, not DefaultRAGroup. Any help would be great, thanks.
06-05-2007 12:33 PM
any guesses?
Do you configure this as a L2L group or as a RA group?
06-06-2007 07:33 AM
Ok, I got it working, only problem is it takes about 10 minutes to come up...
10:38:14 713902 Group = DefaultRAGroup, IP = 75.x.x.x, Removing peer from peer table failed, no match!
10:47:08 713904 Group = DefaultRAGroup, IP = 75.x.x.x, Received encrypted Oakley Main Mode packet with invalid payloads, MessID = 0
10:47:08 713905 Group = DefaultRAGroup, IP = 75.x.x.x, WARNING, had problems decrypting packet, probably due to mismatched pre-shared key. Switching user to tunnel-group: DefaultL2LGroup
10:47:09 713903 Group = DefaultL2LGroup, IP = 75.x.x.x, Freeing previously allocated memory for authorization-dn-attributes
10:47:10 113009 AAA retrieved default group policy (DfltGrpPolicy) for user = DefaultL2LGroup
10:47:10 713119 Group = DefaultL2LGroup, IP = 75.x.x.x, PHASE 1 COMPLETED
10:47:10 713122 IP = 75.x.x.x, Keep-alives configured on but peer does not support keep-alives (type = None)
10:47:16 713075 Group = DefaultL2LGroup, IP = 75.x.x.x, Overriding Initiator's IPSec rekeying duration from 86400 to 28800 seconds
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide