cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
708
Views
0
Helpful
2
Replies

PIX debug message

lisbeth.jacobsen
Community Member

Hi,

Can anyone tell me what the message:

crypto_isakmp_process_block:src:x.x.x.x, dest:y.y.y.y spt:500 dpt:500

ISAKMP: reserved not zero on payload 8!might mean?

Lisbeth

2 Replies 2

gfullage
Cisco Employee
Cisco Employee

"reserved not zero on payload" generally means your pre-shared keys don't match on both sides. Try entering them again on both sides, make sure you don't cut/paste them in though, as this sometimes puts odd characters or spaces in the key and therefore you get this message.

Hi Glenn,

I have had the message "reserved not zero on payload 5!" where this has indeed been the case. In this instance the message appears in debug for a VPN between a Checkpoint firewall and a PIX that is, to all intents and purposes, working (and has been operational for some months). In looking around on the web the closest I got was that this may have something to do with pfs although this is not configured at my end (PIX) and as far as I know not at theirs either. They are telling me that the VPN seems to have periods where it drops out although I suspect that the tunnel actually remains up but for some reason data does not traverse it for a short period of time (they say it generally fixes itself after 90 or so minutes).

Regards

Lisbeth