cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
793
Views
0
Helpful
1
Replies

VPN LSL tunnel problem between VPN concentrator and IOS router

m-ko
Level 1
Level 1

VPN LSL tunnel problem between VPN concentrator and IOS router. The tunnel is established, but the VPN concentratror is not passing traffic. I checked the log form the concentrator that shown below:

What bother is I can't find the erroe nessage "Reason: Peer Terminate, Peer is having heat problems." no where in the internet.

If someone knows what it is, please let me know.

Thanks.

sightay@yahoo.com

60557 12/06/2010 10:25:29.980 SEV=6 AUTH/41 RPT=10418 96.x.118.87
Authentication successful: handle = 102, server = Internal, group = 96.x.118.87

60558 12/06/2010 10:25:29.980 SEV=4 IKE/119 RPT=3378 96.x.118.87
Group [96.x.118.87]
PHASE 1 COMPLETED

60559 12/06/2010 10:25:29.980 SEV=6 IKE/121 RPT=3378 96.x.118.87
Keep-alive type for this connection: DPD

60560 12/06/2010 10:25:29.980 SEV=4 AUTH/22 RPT=3339
User [96.x.118.87], Group [96.x.118.87] connected

60561 12/06/2010 10:25:29.980 SEV=4 AUTH/84 RPT=54
LAN-to-LAN tunnel to headend device 96.x.118.87 connected

60562 12/06/2010 10:25:30.350 SEV=5 IKE/35 RPT=70 96.x.118.87
Group [96.x.118.87]
Received remote IP Proxy Subnet data in ID Payload:
Address 10.98.0.0, Mask 255.255.0.0, Protocol 0, Port 0

60565 12/06/2010 10:25:30.350 SEV=5 IKE/34 RPT=3851 96.x.118.87
Group [96.x.118.87]
Received local IP Proxy Subnet data in ID Payload:
Address 10.251.0.0, Mask 255.255.0.0, Protocol 0, Port 0

60568 12/06/2010 10:25:30.350 SEV=5 IKE/66 RPT=3814 96.x.118.87
Group [96.x.118.87]
IKE Remote Peer configured for SA: L2L: closing_school

60569 12/06/2010 10:25:30.460 SEV=4 IKE/49 RPT=3813 96.x.118.87
Group [96.x.118.87]
Security negotiation complete for LAN-to-LAN Group (96.x.118.87)
Responder, Inbound SPI = 0x3f92770d, Outbound SPI = 0xeedfa6f8

60572 12/06/2010 10:25:30.460 SEV=4 IKE/120 RPT=3813 96.x.118.87
Group [96.x.118.87]
PHASE 2 COMPLETED (msgid=3dd4a731)

60573 12/06/2010 10:25:58.630 SEV=5 IKE/35 RPT=71 96.x.118.87
Group [96.x.118.87]
Received remote IP Proxy Subnet data in ID Payload:
Address 10.98.0.0, Mask 255.255.0.0, Protocol 0, Port 0

60576 12/06/2010 10:25:58.630 SEV=5 IKE/34 RPT=3852 96.x.118.87
Group [96.x.118.87]
Received local IP Proxy Subnet data in ID Payload:
Address 10.251.0.0, Mask 255.255.0.0, Protocol 0, Port 0

60579 12/06/2010 10:25:58.630 SEV=5 IKE/66 RPT=3815 96.x.118.87
Group [96.x.118.87]
IKE Remote Peer configured for SA: L2L: closing_school

60580 12/06/2010 10:25:58.690 SEV=4 IKE/49 RPT=3814 96.x.118.87
Group [96.x.118.87]
Security negotiation complete for LAN-to-LAN Group (96.x.118.87)
Responder, Inbound SPI = 0x0251e3be, Outbound SPI = 0x9265482b

60583 12/06/2010 10:25:58.690 SEV=4 IKE/120 RPT=3814 96.x.118.87
Group [96.x.118.87]
PHASE 2 COMPLETED (msgid=b89dc23e)

60584 12/06/2010 10:26:28.630 SEV=5 IKE/50 RPT=2813 96.x.118.87
Group [96.x.118.87]
Connection terminated for peer 96.x.118.87.
Reason: Peer Terminate, Peer is having heat problems.
Remote Proxy N/A, Local Proxy N/A

60588 12/06/2010 10:26:28.630 SEV=6 IKE/0 RPT=104
MSG_FSM_QM lookup failed (handle 3dd4a731)!

60589 12/06/2010 10:26:28.630 SEV=4 AUTH/23 RPT=54 96.x.118.87
User [96.x.118.87], Group [96.x.118.87] disconnected: duration: 0:00:58

1 Reply 1

mulatif
Cisco Employee
Cisco Employee

Hi,

I have never seen this message before..!

I can see the Tunnel coming UP Phase1\Phase2 completed and then going down.

What do you see on the IOS Router ? What does the "debug crypto isakmp\ipsec" show from the time Tunnel is negotiated \ UP and then goes to Down state again ?

Thanks,

Naman