Hi,<br>I am trying to setup a ipsec tunnel(sVTI) between 2 cisco 7604.<br>The tunnel does not come up , and i see following error message. <br><br><br>CISCO1<-------------->Cisco2<br>Interface Address :<a href="http://20.0.0.2">20.0.0.2</a> <a href="http://20.0.0.1">20.0.0.1</a><br>
Loopback address :<a href="http://30.0.0.2">30.0.0.2</a> <a href="http://30.0.0.1">30.0.0.1</a><br><br>----------------------------------------------------------------------<br>crypto isakmp policy 1<br> encr 3des<br>
authentication pre-share<br> group 5<br>crypto isakmp key 123456789123456 address <a href="http://0.0.0.0">0.0.0.0</a> <a href="http://0.0.0.0">0.0.0.0</a> !<br>!<br>crypto ipsec transform-set redback ah-md5-hmac !<br>
crypto ipsec profile redback<br> set transform-set redback<br>!<br>interface Tunnel1<br> ip address <a href="http://91.0.0.1">91.0.0.1</a> <a href="http://255.255.255.252">255.255.255.252</a><br> tunnel source Loopback1<br>
tunnel destination <a href="http://30.0.0.1">30.0.0.1</a><br> tunnel mode ipsec ipv4<br> tunnel protection ipsec profile redback !<br>interface Loopback0<br> ip address <a href="http://11.0.0.4">11.0.0.4</a> <a href="http://255.255.255.255">255.255.255.255</a><br>
!<br>interface Loopback1<br> ip address <a href="http://30.0.0.2">30.0.0.2</a> <a href="http://255.255.255.255">255.255.255.255</a><br>!<br>interface FastEthernet4/47<br> ip address <a href="http://20.0.0.2">20.0.0.2</a> <a href="http://255.255.255.0">255.255.255.0</a><br>
end<br>----------------------------------------------------------------<br>1w4d: KMI: IPSEC key engine sending message KEY_ENG_REQUEST_SAS to Crypto IKMP.<br>1w4d: KMI: Crypto IKMP received message KEY_ENG_REQUEST_SAS from IPSEC key engine.<br>
1w4d: ISAKMP:(0): SA request profile is (NULL)<br>1w4d: ISAKMP: Created a peer struct for <a href="http://30.0.0.1">30.0.0.1</a>, peer port 500<br>1w4d: ISAKMP: New peer created peer = 0x4A109BA4 peer_handle = 0x800008E1<br>
1w4d: ISAKMP: Locking peer struct 0x4A109BA4, refcount 1 for isakmp_initiator<br>1w4d: ISAKMP: local port 500, remote port 500<br>1w4d: ISAKMP: Unable to allocate IKE SA<br>1w4d: ISAKMP: Unlocking peer struct 0x4A109BA4 for isadb_unlock_peer_delete_sa(), count 0<br>
1w4d: KMI: Crypto IKMP sending message KEY_MGR_SESSION_CLOSED to IPSEC key engine.<br>1w4d: ISAKMP: Deleting peer node by peer_reap for <a href="http://30.0.0.1">30.0.0.1</a>: 4A109BA4<br>1w4d: ISAKMP:(0):purging SA., sa=0, delme=4A1F4FE4<br>
1w4d: ISAKMP: Error while processing SA request: Failed to initialize SA<br>1w4d: ISAKMP: Error while processing KMI message 0, error 2.<br>1w4d: KMI: IPSEC key engine received message KEY_MGR_SESSION_CLOSED from Crypto IKMP.<br>
1w4d: KMI: IPSEC key engine sending message KEY_ENG_REQUEST_SAS to Crypto IKMP.<br>-------------------------------------------------------------------------<br>any suggestion?<br><br>