Hi,
I have an issue were there is no phase 2 being negotiated for a specific subnet. I have checked that the policys match on the ipsec config which they do and timers etc. Everything looks ok but the router refuses to encrypt any traffic even though it is hitting the ACL. The incrementing errors definately point to a Phase negotiatiation issue.
Please find Debug, router config and sh ipsec sa for the problem subnet attached.
Cheers
Kev
