"His hash no match - this node outside NAT" message in debug of IPSEC

CiscoPurpleBelt · ‎02-26-2020

Trying to T-shoot an IPSEC tunnel on a router where phase 1 will not come up.

I see "His hash no match - this node outside NAT" in debugs however there is no natting done on the peer devices or devices in between to my knowledge. What exactly does this mean?

I also see "vendor ID seems Unity/DPD but major 0 mismatch vendor ID is DPD".

Any help?

Cristian Matei · ‎03-05-2020

Hi,

Ignore those messages (are just informational), and post the output of "debug crypto isakmp".

Regards,

Cristian Matei.

CiscoPurpleBelt · ‎03-05-2020

Thanks!

Sorry its not possible to post on here, I can't get it unless I go to site. It shows its failing at MM1 message. Perhaps it is a reachability issue at this point from either traffic being blocked in between on transport or another reachability issue such as routing issues with transport?

Cristian Matei · ‎03-06-2020

Hi,

Post output from both "debug crypto isakmp" and "debug crypto IPSec".

Regards,

Cristian Matei.