[c-nsp] Site to Site VPN

[Mohammad Khalil]

hey man 

thanks for the response 
now man i have another issue is that the show crypto isakmp sa is showing that the tunnel is up QM_IDLE
but i cannot ping the other side and it was working normally 
and i see in the log message that there is "it is temporarly disabled due to recursive routing"

Date: Mon, 9 Aug 2010 11:42:05 +0200
From: jan.gregor at chronix.org
To: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Site to Site VPN

Hi,
 
> what is the possible solution to solve this issue ?
> IKE message from x.x.x.x has no SA and is not an initialization offer
 
Probably reset of VPN on the other side. This message is commonly seen a
when one side of vpn reloads. The other side just does not know that
association is not valid any more.
If this is persistent problem and the VPN cannot establish itself, then
capture some debugs a sent them in, just this error message is not
sufficient to draw any conclusions. Otherwise just ignore it, it is
correct behaviour.
 
Best regards,
 
Jan
 

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/