Manual IPSec issue

[andrew.ho]

Hi,

I am following the instructions in

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080093c26.shtml

to setup a manual IPSec tunnel between two routers without any success. I can see the interested traffic hits the match address in cryto map. However, no ipsec sa is formed. When I do a debug, I got the following error message:

IPSEC(ipsec_manual_keymgr): couldn't allocate inflow

Anybody can help? Thanks.

Andrew

[Steve Fuller]

Unless you have a very good reason to use manual keying I would suggest you use IKE for the key exchange.

Keys negotiated via IKE are changed (by default) every hour and are therefore much more secure than manual keys.

The document "Configuring IPSec Router-to-Router Hub and Spoke" (http://www.cisco.com/en/US/partner/tech/tk583/tk372/technologies_configuration_example09186a008009463b.shtml) shows how to use IKE with "pre-shared" keys.

Regards