network extension mode 3002 to 3030 problem

[dlac455]

We want to do this for IP phones. Has anyone successfully done this with everything at 3.5.1? We are getting:

4841 02/18/2002 09:19:07.360 SEV=4 IKE/125 RPT=95 a.b.c.d (ip addr)

Group [3k2v35] User [johndoe]

Failed to validate remote network for network extension mode

[cjacinto]

This is just connecting the 3002 at the moment to the 3030 right, not yet with IP phones behind. Common issue on this is that you probably doing RRI for the network behind the 3002, and your internal router on the 3030 actually has this route as well on its table which it is actually exchanging with the 3030 via some IGP. Or these is a route to the 3002's private via another way. Maybe be best taken care of as a TAC case for online troubleshooting.

[dlac455]

Yes, just connecting them at the moment. We DID take the route out of the 3030 internal route tables. There is an open TAC case, but we are also trying this avenue in an attempt at expediency. Appears the 2nd message is attempting to validate the Network extension Network with the "framed ip address" in the 2nd message. The framed IP address looks like a subnet mask instead of a net.

4841 02/18/2002 09:19:07.360 SEV=4 IKE/125 RPT=95 1.2.3.4 (dsl address)

Group [3k2v35] User [JohnDoe]

Failed to validate remote network for network extension mode

4843 02/18/2002 09:19:07.360 SEV=4 AUTH/60 RPT=95

Remote Network Address (2.3.4.5 Network Extension Net) does not matched

framed IP address (255.255.255.0)