Persistent log entries of %CRYPTO-6-IKMP_POLICY_DEFAULT: Using ISAKMP

[train00wreck]

Hello, I have multiple IKEv2 site-to-site VPNs configured on a C1111-4P device, as well as a client-to-site that I use infrequently. All of the VPNs have been working fine for a while, but I notice the following message in the log repeated several times a day. Why is this log entry showing up? The VPNs are not having problems, and the log messages don't seem to be correlated to P1/P2 IKE renewals as far as I can tell:

Oct 29 16:27:49.769: %CRYPTO-6-IKMP_POLICY_DEFAULT: Using ISAKMP Default policies
Oct 29 16:37:27.577: %CRYPTO-6-IKMP_POLICY_DEFAULT: Using ISAKMP Default policies
Oct 29 16:37:29.223: %CRYPTO-6-IKMP_POLICY_DEFAULT: Using ISAKMP Default policies
Oct 29 22:25:42.707: %CRYPTO-6-IKMP_POLICY_DEFAULT: Using ISAKMP Default policies
Oct 29 22:55:25.424: %CRYPTO-6-IKMP_POLICY_DEFAULT: Using ISAKMP Default policies
Oct 29 22:55:26.107: %CRYPTO-6-IKMP_POLICY_DEFAULT: Using ISAKMP Default policies
Oct 30 06:22:23.028: %CRYPTO-6-IKMP_POLICY_DEFAULT: Using ISAKMP Default policies
Oct 30 06:39:26.836: %CRYPTO-6-IKMP_POLICY_DEFAULT: Using ISAKMP Default policies
Oct 30 06:39:28.918: %CRYPTO-6-IKMP_POLICY_DEFAULT: Using ISAKMP Default policies
Oct 30 06:55:01.011: %CRYPTO-6-IKMP_POLICY_DEFAULT: Using ISAKMP Default policies
Oct 30 07:24:36.744: %CRYPTO-6-IKMP_POLICY_DEFAULT: Using ISAKMP Default policies
Oct 30 14:06:04.839: %CRYPTO-6-IKMP_POLICY_DEFAULT: Using ISAKMP Default policies
Oct 30 14:44:35.368: %CRYPTO-6-IKMP_POLICY_DEFAULT: Using ISAKMP Default policies

[Cristian Matei]

Hi,

    It's not clear, are tunnels still working and you see these log messages or tunnels no longer working and you see these log messages? These log messages mean you'r using the default built-in ISAKMP policies, which means NO ISAKMP policies have been manually configured.

Best,

Cristian.

[train00wreck]

As i said in the post, the tunnels are working fine.

[Cristian Matei · Accepted solution]

Hi,

   In this case, no action needed; those messages get triggered whenever an IKE SA is negotiated, as your config uses default ISAKMP policies; are just informational messages.

Best,

Cristian.

[train00wreck]

OK thanks for confirming