IPSEC ERROR

[tbarnett]

Please is there anyone out there who would be able to tell me what the below error is?

Dec 8 22:37:43: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Quick mode failed with peer at 10.255.254.198

Any help would be greatful

[jmia]

Hello Terry,

If this error log is from a Cisco 1700 Series Router running IOS 12.2(8)YM - Then the following might of interest:

BUG ID: CSCdx64971

When two routers are configured so that they can ping each other over WIC-2T interfaces, and IPSec is configured on both routers and applied to the WIC-2T interfaces, further pinging can fail with the following message received:

%CRYPTO-6-IKMP_MODE_FAILURE: Processing of Quick mode failed with peer at 10.0.0.1

Hope this is of help, let me know...

Jay.

[tbarnett]

Jay

Thanks for that , but this is on a c7200 so im not sure if that woudl be the same bug

t

[d-garnett]

This is a Phase2 VPN Establishment Error

If the connection (as is) has previously worked, then it may be a bug.

If this is a new setup, then check your ACL's (for protected traffic), your Transform Sets (between the peers) for inconsistancies, and your Crypto Map statements.

also make sure that ESP (or AH, if used) is allowed in the inbound Access List on your external interface.

What is the Network Topology?

IOS to IOS (or PIX)

PIX to PIX (or IOS)

Concentrator to Concentrator,(IOS, or PIX) ?