cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
600
Views
1
Helpful
1
Replies

SITE-to-SITE VPN giving unusal error message

FrejusMA
Level 1
Level 1

Hello there

Hope you are doing great. I had a site-to-site VPN between two peers (ASA and Cisco router) that was working fine. Suddenly the crypto came down and upon a debug on the router I found the below

%CRYPTO-5-IKMP_SETUP_FAILURE: IKE SETUP FAILED for local:<Spoke Public IP Address> local_id:<Spoke Public IP Address> remote:<HUB Public IP Address> remote_id:<HUB Public IP Address> IKE profile:None fvrf:None fail_reason:Operator Request fail_class_cnt:1

Almost 5 years of experiences and first time seeing that. Does anyone has any idea or encounter this before !?

 

Thanks in advance

1 Reply 1

Hi @FrejusMA 

This error mensage is nothing helpful unfortunatelly.  It would be good if you could run

debug crypto isamak

degub crypto ipsec

Share the output please.