12-20-2012 06:27 AM
Hi,
My site to site VPN is failing with these error message.
Using IPsec SA configuration: 172.28.0.0/16<->192.168.100.0/28
[IKE] INFO: Configuration found for 209.87.231.245.
[IKE] INFO: Configuration found for 209.87.231.245.
[IKE] INFO: Initiating new phase 2 negotiation: 209.183.24.116[0]<=>209.87.231.245[0]
[IKE] ERROR: encryption 7 failed.
[IKE] ERROR: failed to start post getspi.
[IKE] INFO: an undead schedule has been deleted: 'quick_i1prep'
Looks like something is hung at the ASA side, is there a way to clear the tunnel or the problem bigger then I think...
Thank you for your help.
12-20-2012 09:19 PM
Hi
please check the configration about the ipsec phase 2 transformset .
I think there is some miss about the configtration .
Would you share your configration of the ASA?
12-21-2012 05:16 AM
Hi,
I rebooted both Firewall this morning and site to site is up and working.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: