cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4598
Views
0
Helpful
0
Replies

IPSec Crypto VPN Problem

CSCO12798688
Level 1
Level 1

Hello help me please

In different dual hub DMVPN design 10.123.0.2 and 10.123.0.3 are spoke router's these router are belongs to two different hub and not establishing dynamic vpn between these spoke routers

i issued debug crypto ipsec error into both routers

Below details are the debug logs:-

07-20-2016 13:38:55 Local7.Notice 10.123.0.2 370223: Jul 20 13:36:31: %CRYPTO-5-IKMP_SETUP_FAILURE: IKE SETUP FAILED for local:86.98.89.159 local_id:86.98.89.159 remote:116.91.118.60 remote_id:116.91.118.60 IKE profile:DMVPN1 fvrf:None fail_reason:Proposal failure fail_class_cnt:1
07-20-2016 13:38:54 Local7.Debug 10.123.0.2 370222: Jul 20 13:36:31 UTC: insert of map into mapdb AVL failed, map + ace pair already exists on the mapdb
07-20-2016 13:38:54 Local7.Debug 10.123.0.2 370221: Jul 20 13:36:31 UTC: insert of map into mapdb AVL failed, map + ace pair already exists on the mapdb
07-20-2016 13:38:54 Local7.Debug 10.123.0.2 370220: Jul 20 13:36:31 UTC: insert of map into mapdb AVL failed, map + ace pair already exists on the mapdb
07-20-2016 13:38:54 Local7.Debug 10.123.0.2 370219: Jul 20 13:36:31 UTC: insert of map into mapdb AVL failed, map + ace pair already exists on the mapdb
07-20-2016 13:38:54 Local7.Debug 10.123.0.2 370218: Jul 20 13:36:31 UTC: insert of map into mapdb AVL failed, map + ace pair already exists on the mapdb
07-20-2016 13:38:54 Local7.Debug 10.123.0.2 370217: Jul 20 13:36:31 UTC: insert of map into mapdb AVL failed, map + ace pair already exists on the mapdb
07-20-2016 13:38:54 Local7.Debug 10.123.0.2 370216: Jul 20 13:36:31 UTC: insert of map into mapdb AVL failed, map + ace pair already exists on the mapdb
07-20-2016 13:38:54 Local7.Debug 10.123.0.2 370215: Jul 20 13:36:31 UTC: insert of map into mapdb AVL failed, map + ace pair already exists on the mapdb
07-20-2016 13:38:54 Local7.Debug 10.123.0.2 370214: Jul 20 13:36:31 UTC: insert of map into mapdb AVL failed, map + ace pair already exists on the mapdb
07-20-2016 13:38:54 Local7.Debug 10.123.0.2 370213: Jul 20 13:36:31 UTC: insert of map into mapdb AVL failed, map + ace pair already exists on the mapdb
07-20-2016 13:38:54 Local7.Debug 10.123.0.2 370212: Jul 20 13:36:31 UTC: IPSEC(ERROR): crypto_notify_rp Rejected notify RP, elapse time 0 < 1000
07-20-2016 13:38:47 Local7.Debug 10.123.0.3 176455: Jul 20 13:35:45.303: IPSEC(key_engine): got a queue event with 1 KMI message(s)
07-20-2016 13:38:47 Local7.Debug 10.123.0.3 176454: spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0
07-20-2016 13:38:47 Local7.Debug 10.123.0.3 176453: lifedur= 3600s and 4608000kb,
07-20-2016 13:38:47 Local7.Debug 10.123.0.3 176452: protocol= ESP, transform= esp-3des esp-md5-hmac (Transport),
07-20-2016 13:38:47 Local7.Debug 10.123.0.3 176451: ,
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176450: remote_proxy= 185.8.6.14/255.255.255.255/47/0
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176449: local_proxy= 116.91.118.60/255.255.255.255/47/0,
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176448: (key eng. msg.) OUTBOUND local= 116.91.118.60:500, remote= 185.8.6.14:500,
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176447: Jul 20 13:35:45.303: IPSEC(sa_request): ,
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176446: remote_proxy= 185.8.6.14/255.255.255.255/47/0
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176445: local_proxy= 116.91.118.60/255.255.255.255/47/0,
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176444: (identity) local= 116.91.118.60:0, remote= 185.8.6.14:0,
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176443: Jul 20 13:35:45.303: IPSEC(key_engine): request timer fired: count = 1,
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176442: Jul 20 13:35:45.299: IPSEC(key_engine): got a queue event with 1 KMI message(s)
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176441: spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176440: lifedur= 3600s and 4608000kb,
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176439: protocol= ESP, transform= esp-3des esp-md5-hmac (Transport),
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176438: remote_proxy= 82.112.33.57/255.255.255.255/47/0,
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176437: local_proxy= 116.91.118.60/255.255.255.255/47/0,
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176436: (key eng. msg.) OUTBOUND local= 116.91.118.60:500, remote= 82.112.33.57:500,
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176435: Jul 20 13:35:45.299: IPSEC(sa_request): ,
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176434: remote_proxy= 82.112.33.57/255.255.255.255/47/0
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176433: local_proxy= 116.91.118.60/255.255.255.255/47/0,
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176432: (identity) local= 116.91.118.60:0, remote= 82.112.33.57:0,
07-20-2016 13:38:46 Local7.Debug 10.123.0.3 176431: Jul 20 13:35:45.299: IPSEC(key_engine): request timer fired: count = 1,
07-20-2016 13:38:45 Local7.Debug 10.123.0.2 370211: Jul 20 13:36:21 UTC: IPSEC(ERROR): crypto_notify_rp Rejected notify RP, elapse time 0 < 1000
07-20-2016 13:38:35 Local7.Debug 10.123.0.2 370210: Jul 20 13:36:11 UTC: IPSEC(ERROR): crypto_notify_rp Rejected notify RP, elapse time 0 < 1000
07-20-2016 13:38:25 Local7.Debug 10.123.0.2 370209: Jul 20 13:36:01 UTC: IPSEC(ERROR): crypto_notify_rp Rejected notify RP, elapse time 0 < 1000

0 Replies 0
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: