VPN Tunnel question

[mary_odriscoll]

Dear all

I have a problem with a vpn configuration at the moment. Sita A connects via VPN to NMCPIX and Site B connects via VPN to NMCPIX. When I enable debug isakmp and ipsec on NMCPIX and start off icmp packets to test connectivity over both VPN's(icmp is allowed), NMCPIX will respond to ISAKMP queries from Site A but will not respond to IPSEC SA queries from SiteA and SiteB is totally isolated.

I will eventually get errors on NMCPIX such as

"ISAKMP: reserved not zero on payload 8!

ISAKMP: malformed payload"

I have spent hours troubleshooting and I would appreciate any help

TIA

Mary

[jmia]

Mary,

The first error:"ISAKMP: reserved not zero on payload 8!

Indicates that the ISAKMP Keys do not match, try rekeying the ISAKMP.

The other eror: ISAKMP: malformed payload, indicates pre-shared keys on peers do not match. Check the pre-shared keys on all peers. Did you notice any "sanity check error" ?

PS. on a side note, do you work in C&W DNS?

Jay

[jmia]

Mary,

The first error:"ISAKMP: reserved not zero on payload 8!

Indicates that the ISAKMP Keys do not match, try rekeying the ISAKMP.

The other eror: ISAKMP: malformed payload, indicates pre-shared keys on peers do not match. Check the pre-shared keys on all peers. Did you notice any "sanity check error" ?

PS. on a side note, do you work in C&W DNS?

Jay

[wisfaque]

Hello Mary

I agree that the keys do not macth. But also to be doubly sure check the transform sets on both sites also.

Thanks

Wakif

[mary_odriscoll]

Wakif/Jay

Thanks for the assistance. The isakmp, transform sets and pre-shared secret were all correct so I had to delete the 2 VPN's and recreate. As soon as I did that both VPN's are now working. However, while my icmp tests are successful, I am still getting these errors :-

ISAKMP: reserved not zero on payload 8!

ISAKMP: malformed payload

even though my ip tests are successful. Any ideas ?

TIA

Mary ( not of C+W DNS but C+W Ireland_