VPN Tunnel Error message

[SAP]

Aug 18 14:48:12 crpalo-4.pal.sap.corp 7110: Aug 18 21:51:59: %HW_VPN-1-LPRXERR:

Hardware VPN3/8: Key management error, cmd=0x33 status=0x104D

Aug 18 14:48:12 crpalo-4.pal.sap.corp 7110: Aug 18 21:51:59: %HW_VPN-1-LPRXERR:

Hardware VPN3/8: Key management error, cmd=0x33 status=0x104D

Aug 18 14:48:13 crpalo-4.pal.sap.corp 7111: Aug 18 21:51:59: IPSECcard: an error

coming back 104D

Aug 18 14:48:13 crpalo-4.pal.sap.corp 7112: Aug 18 21:51:59: ISAcard:

Failed COMMAND:

Aug 18 14:48:13 crpalo-4.pal.sap.corp 7113: 07C16D10:

Aug 18 14:48:13 crpalo-4.pal.sap.corp 7114: Aug 18 21:51:59: ISAKMP (0:226): Una

ble to generate DH phase I parameters!

Aug 18 14:48:13 crpalo-4.pal.sap.corp 7115: Aug 18 21:52:00: %HW_VPN-1-LPRXERR:

Hardware VPN3/8: Key management error, cmd=0x33 status=0x104D

Aug 18 14:48:13 crpalo-4.pal.sap.corp 7115: Aug 18 21:52:00: %HW_VPN-1-LPRXERR:

Hardware VPN3/8: Key management error, cmd=0x33 status=0x104D

Aug 18 14:48:14 crpalo-4.pal.sap.corp 7116: Aug 18 21:52:00: IPSECcard: an error

coming back 104D

Aug 18 14:48:14 crpalo-4.pal.sap.corp 7117: Aug 18 21:52:00: ISAcard:

Failed COMMAND:

Aug 18 14:48:14 crpalo-4.pal.sap.corp 7118: 07C175D0:

Aug 18 14:48:14 crpalo-4.pal.sap.corp 7119: Aug 18 21:52:00: ISAKMP (0:226): Una

ble to generate DH phase I parameters!

[thisisshanky]

I would suggest you to open up a case with Cisco. Your EAIM card might need replacement. This is what I see, when I decode the error messages you get.

%HW_VPN-1-LPRXERR: [chars]: Key management error, cmd=[hex] status=[hex]

An unexpected error has occurred during the execution of a key management command by the EAIM.

Recommended Action: Make a note of the status value and contact your Cisco technical support representative. The EAIM will most likely need to be replaced.

Related documents: No specific documents apply to this error message.

2. %HW_VPN-1-LPRXERR: [chars]: Command Error IPSEC cmd=[chars][[hex]] Uproc cmd=[chars][[dec]] status=[chars][[hex]]

An error has occurred during the execution of a key management command by the EAIM.

Recommended Action: The EAIM may require replacement. Make a note of the status value, and contact your Cisco technical support representative.

Related documents: No specific documents apply to this error message.

EAIM is a hardware accelerator module for IPSEC encryption services.

[SAP]

yea, i checked out cisco debug page and saw the same exact thing, but i hoped that you guys would of gave me something else, because the vpn card was recently purchase like a month ago. 3 days ago was when i firsted used it :(

[thisisshanky]

If you purchased it a month ago, and you purchased maintenance contract on it, then you can very well open a tac case. Obviously Cisco TAC engineers, have more access to resources, related to troubleshooting problems like the one above. Forum participants like us have limited access compared to Cisco TAC. So I would again recommend you to go ahead and open a case with TAC. Even if the card is new, there could be hardware issues, with it.