11-18-2021 07:03 AM - edited 11-18-2021 07:20 AM
one of my IKEv2 tunnels is stuck in up/down but the other one is up/up and working. Can someone help me fix this? See configs and debugs below. IP addresses have been modified but hopefully you can still follow.
Solved! Go to Solution.
11-19-2021 07:00 AM
I figured it out using debugs. Auth failure was occurring b/c the remote peer was using incorrect source peer IP address. Once the correct source peer IP was added to VPN tunnel configuration, the SVTI came up and established security association.
11-18-2021 08:02 AM
You have not specified which specific tunnel is down.
However, there is authentication issue for one which is taking one of this "down". Please refer the following link for further troubleshooting & provide more information of relevant "show" and 'debug" outputs.
19490: Nov 18 09:56:36.294 EST: IKEv2-ERROR:(SESSION ID = 42128,SA ID = 1):: Failed to locate an item in the database 019491: Nov 18 09:56:36.295 EST: IKEv2:(SESSION ID = 42128,SA ID = 1):Verification of peer's authentication data FAILED 019492: Nov 18 09:56:36.295 EST: IKEv2:(SESSION ID = 42128,SA ID = 1):Auth exchange failed
11-18-2021 08:16 AM
interface tunnel 3 with peer IP x.x.229.152 is up/down
11-18-2021 08:48 PM
Thank you. It looks Auth failure issue is not relevant for this peer then.
Can you please post conditional debug (link below) of "debug crypto isakmp" at both ends of tunnels?
Regards...
Ashok.
11-19-2021 07:00 AM
I figured it out using debugs. Auth failure was occurring b/c the remote peer was using incorrect source peer IP address. Once the correct source peer IP was added to VPN tunnel configuration, the SVTI came up and established security association.
11-21-2021 12:43 AM
Excellent. Glad to know that you could able to resolve
10-11-2022 02:45 AM
how did you apply to debug and how it shows it kindly let me know which commands you used, i also have some issues regarding IPsec ikev2
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide