04-04-2016 04:39 AM - edited 03-03-2019 08:11 AM
Dear all,
this is the message error that i get went i try a ping from my side to the remote site
baosslvpn# sh crypto isakmp sa
Active SA: 1
Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 1
1 IKE Peer: 154.73.61.3
Type : user Role : initiator
Rekey : no State : MM_WAIT_MSG4
baosslvpn#
baosslvpn#
baosslvpn# sh crypto isakmp sa
Active SA: 1
Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 1
1 IKE Peer: 154.73.61.3
Type : user Role : initiator
Rekey : no State : MM_WAIT_MSG2
baosslvpn#
baosslvpn# sh crypto isakmp sa
Active SA: 1
Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 1
1 IKE Peer: 154.73.61.3
Type : L2L Role : initiator
Rekey : no State : MM_ACTIVE
baosslvpn#
as you can see with several sh crypto isakmp some time state is come ACTIVE
some body can help me check what happened exactly with this link site to site ??
04-05-2016 06:47 AM
Hello bitamnaualna,
Did you collect any logs at the time the site to site tunnel dropped?
From the information that I'm seeing, I just can tell you that the tunnel dropped and it negotiated again.
Without logs or debugs we can't know the actual cause of the tunnel to be dropped.
Regards,
- Javier -
04-05-2016 07:33 AM
04-19-2016 01:33 PM
By looking at the logs provided it appears to be a mismatch on phase 2.
This can be caused by the interesting traffic, the peer or the transform-set that are not matching on both ends.
Regards
-Javier-
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: