DMVPN hub and deleting spoke SA - reason "Death by retransmission P1"

[johartman]

Hello...I've seen several threads on this error but cannot find a hit on a solution.  We have a 7604 headend running DMVPN and eleven spokes using 3845's and 2821 configured identical but one of the spokes is getting the sa deleted every 30 seconds and immediately re-initializes.  I've tried tweaking several timers on the spoke such as the ip nhrp registration timeout, crypto isakmp keepalive, IPsec Anti-replay window size to 1024 and others but cannot get this expiring sa to stop.  Any help or insight is much appreciated.  I'm attaching the log from the headend 7604.  The spoke 3845 shows no errors even when debug crypto isakmp and debug crypto ipsec.

[bank.vtb.account]

Hi!

I have no idea because I haven't seen any configs, but i guess you need to run some debugs. Debug ip nhrp, debug crypto isakmp, debug ip cef

WBR,
Sergey

[johartman]

Hello Sergey,

Attached are the configs from the spoke 3845 and the headend 7604.  The spoke is an MPLS site running on VLAN 2151 and trunked with 3 other VLANS on port Gi 1/1 on the headend 7604.