Crypto error message

[laltman]

I have several times received this message "%CRYPTO-4-IKMP_NO_SA: IKE message from xx.xx.xx.xx has no SA and is not an initialization offer"

on one of my remote site 3745 routers. It is connected to a DSL service and connected via an IPsec tunnel back to a Cisco 3030 concentrator. It repeats this message every 60 sec for about a day until the crypto tunnel shuts down and restarts. About all Cisco says about it is it might be a DOS attack. Anyone else have any more information.

[thisisshanky]

Can you paset the debug messages on this crypto tunnel if possible ? (debug crypto ipsec or debug crypto isakmp) What IOS is being used on the router ?

[laltman]

%CRYPTO-4-IKMP_NO_SA: IKE message from ( outside ip address of concentrator) has no SA and is not an initialization offer

Usint 12.3(8)T