Error Vpn Phase 2 ( Send Error ipsec)

[Cisquito19]

Good afternoon, my name is David and I am manager of a small network.

I have a problem with my cisco vpn.

It consists of a cisco 877 (Central) and 837 (node) with a point to point VPN with IPSec and GRE tunnel.

Testing the VPN node 837 get the result of "Send errors 9" sh crypto ipsec sa.

For me this error?

They are not sent correctly by the udp 500?

Thanks for everything.

Good afternoon, my name is David and I am manager of a small network.

I have a problem with my cisco vpn.

It consists of a cisco 877 (Central) and 837 (node) with a point to point VPN with IPSec and GRE tunnel.

Testing the VPN node 837 get the result of "Send errors 9" sh crypto ipsec sa.

For me this error?
They are not sent correctly by the udp 500?

Thanks for everything.

[Cisquito19]

Any recommendations?

Thank you very much for everything 

[Marcin Latosiewicz]

David,

Send errors increase when a packet arrives, matches traffic selectors but there are no active IPsec SAs.

I.e. packet is dropped.

Whatever problem you're facing is most likely not related to send errors, especially having a look at packets sent and received.

Marcin

[Cisquito19]

Marcin thank you very much for everything.

What do recommend you make to the node?

THANK YOU!

[Marcin Latosiewicz]

I would suggest to run SVTI between the two routers rather than current GRE over IPsec.

Marcin

[Cisquito19]

Good Morning

Tell me some link to configure SVTI

Thank you very much for everything.

[Marcin Latosiewicz]

I would start here:

https://supportforums.cisco.com/community/netpro/security/vpn/blog/2010/12/08/advantages-of-vti-configuration-for-ipsec-tunnels

It contains links to config guide and example configs.