cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
866
Views
0
Helpful
1
Replies

Cannot sucessfully negotiate ISAKMP Phase 1

d3mb0y555
Level 1
Level 1

I am trying to set up a site to site VPN tunnel using GRE over IPSEC. Below is the configuration from both routers and debug output. I'm scratching my head on this one. I'm using two Cisco 7600 routers with  SSC-400 SPA modules and 720 Supervisors. The IOS on R1 is 12.2 SXI2 and R2 has 12.2 SXI3.

Any help is appreciated.

Arshad

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

All of your IPsec setup appears correct.

The key debug output appears top be "Unable to allocate IKE SA". I note a similar problem was encountered and documented in this thread. Perhaps you are dealing with a similar incompatibility between the crypto engines and MPLS (or another feature)?