Newsgroup: it.comp.reti.cisco
Titolo: clear cryp isakmp e clear cryp sa - non funziona

Ciao.
Dopo un reload, la VPN (1750 12.1.3xp - 831 12.2.8r) non torna su.
Ho eseguito i commandi clear cryp isakmp e clear cryp sa
sui entrambi i ruter, ma il tunnel non torna su. Il lifetime e a 600.
Qualcuno ha avuto stessi problemi?
12:09:34: ISAKMP: received ke message (1/1)
12:09:34: ISAKMP: local port 500, remote port 500
12:09:34: ISAKMP (0:1): beginning Main Mode exchange
12:09:34: ISAKMP (0:1): sending packet to 222.222.222.222 (I) MM_NO_STATE
12:09:34: ISAKMP (0:1): received packet from 222.222.222.222 (I) MM_NO_STATE
12:09:34: ISAKMP (0:1): processing SA payload. message ID = 0
12:09:34: ISAKMP (0:1): found peer pre-shared key matching 222.222.222.222
12:09:34: ISAKMP (0:1): Checking ISAKMP transform 1 against priority 4
policy
12:09:34: ISAKMP:      encryption DES-CBC
12:09:34: ISAKMP:      hash MD5
12:09:34: ISAKMP:      default group 1
12:09:34: ISAKMP:      auth pre-share
12:09:34: ISAKMP:      life type in seconds
12:09:34: ISAKMP:      life duration (basic) of 600
12:09:34: ISAKMP (0:1): atts are acceptable. Next payload is 0
12:09:35: ISAKMP (0:1): SA is doing pre-shared key authentication using id
type ID_IPV4_ADDR
12:09:35: ISAKMP (0:1): sending packet to 222.222.222.222 (I) MM_SA_SETUP
12:09:35: ISAKMP (0:1): received packet from 222.222.222.222 (I) MM_SA_SETUP
12:09:35: ISAKMP (0:1): processing KE payload. message ID = 0
12:09:35: ISAKMP (0:1): processing NONCE payload. message ID = 0
12:09:35: ISAKMP (0:1): found peer pre-shared key matching 222.222.222.222
12:09:35: ISAKMP (0:1): SKEYID state generated
12:09:35: ISAKMP (0:1): processing vendor id payload
12:09:35: ISAKMP (0:1): processing vendor id payload
12:09:35: ISAKMP (0:1): processing vendor id payload
12:09:35: ISAKMP (0:1): speaking to another IOS box!
12:09:35: ISAKMP (0:1): processing vendor id payload
12:09:35: ISAKMP (1): ID payload
 next-payload : 8
 type         : 1
 protocol     : 17
 port         : 500
 length       : 8
12:09:35: ISAKMP (1): Total payload length: 12
12:09:35: ISAKMP (0:1): sending packet to 222.222.222.222 (I) MM_KEY_EXCH
12:09:35: ISAKMP (0:1): received packet from 222.222.222.222 (I) MM_KEY_EXCH
12:09:35: ISAKMP (0:1): processing ID payload. message ID = 0
12:09:35: ISAKMP (0:1): processing HASH payload. message ID = 0
12:09:35: ISAKMP (0:1): SA has been authenticated with 222.222.222.222
12:09:35: ISAKMP (0:1): beginning Quick Mode exchange, M-ID of -1882105832
12:09:35: ISAKMP (0:1): sending packet to 222.222.222.222 (I) QM_IDLE
12:09:35: ISAKMP (0:1): received packet from 222.222.222.222 (I) QM_IDLE
12:09:35: ISAKMP (0:1): processing HASH payload. message ID = -1625961023
12:09:35: ISAKMP (0:1): processing NOTIFY PROPOSAL_NOT_CHOSEN protocol 0
 spi 0, message ID = -1625961023
12:09:35: ISAKMP (0:1): deleting node -1625961023 error FALSE reason
"informational (in) state 1"
12:09:45: ISAKMP (0:1): retransmitting phase 2 QM_IDLE       -1882105832 ...
12:09:45: ISAKMP (0:1): incrementing error counter on sa: retransmit phase 2
12:09:45: ISAKMP (0:1): incrementing error counter on sa: retransmit phase 2
12:09:45: ISAKMP (0:1): retransmitting phase 2 -1882105832 QM_IDLE
12:09:45: ISAKMP (0:1): sending packet to 222.222.222.222 (I) QM_IDLE
12:09:55: ISAKMP (0:1): retransmitting phase 2 QM_IDLE       -1882105832 ...
12:09:55: ISAKMP (0:1): incrementing error counter on sa: retransmit phase 2
12:09:55: ISAKMP (0:1): incrementing error counter on sa: retransmit phase 2
12:09:55: ISAKMP (0:1): retransmitting phase 2 -1882105832 QM_IDLE
12:09:55: ISAKMP (0:1): sending packet to 222.222.222.222 (I) QM_IDLE
12:10:04: ISAKMP: received ke message (1/1)
12:10:04: ISAKMP (0:1): sitting IDLE. Starting QM immediately
DLE      )
12:10:04: ISAKMP (0:1): beginning Quick Mode exchange, M-ID of 871347288
12:10:04: ISAKMP (0:1): sending packet to 222.222.222.222 (I) QM_IDLE
12:10:04: ISAKMP (0:1): received packet from 222.222.222.222 (I) QM_IDLE
12:10:04: ISAKMP (0:1): processing HASH payload. message ID = -1556838916
12:10:04: ISAKMP (0:1): processing NOTIFY PROPOSAL_NOT_CHOSEN protocol 0
 spi 0, message ID = -1556838916
12:10:04: ISAKMP (0:1): deleting node -1556838916 error FALSE reason
"informational (in) state 1"
12:10:05: ISAKMP (0:1): retransmitting phase 2 QM_IDLE       -1882105832 ...
12:10:05: ISAKMP (0:1): incrementing error counter on sa: retransmit phase 2
12:10:05: ISAKMP (0:1): incrementing error counter on sa: retransmit phase 2
12:10:05: ISAKMP (0:1): retransmitting phase 2 -1882105832 QM_IDLE
12:10:05: ISAKMP (0:1): sending packet to 222.222.222.222 (I) QM_IDLE
12:10:14: ISAKMP (0:1): retransmitting phase 2 QM_IDLE       871347288 ...
12:10:14: ISAKMP (0:1): incrementing error counter on sa: retransmit phase 2
12:10:14: ISAKMP (0:1): incrementing error counter on sa: retransmit phase 2
12:10:14: ISAKMP (0:1): retransmitting phase 2 871347288 QM_IDLE
12:10:14: ISAKMP (0:1): sending packet to 222.222.222.222 (I) QM_IDLE
12:10:15: ISAKMP (0:1): retransmitting phase 2 QM_IDLE       -1882105832 ...
12:10:15: ISAKMP (0:1): incrementing error counter on sa: retransmit phase 2
12:10:15: ISAKMP (0:1): incrementing error counter on sa: retransmit phase 2
12:10:15: ISAKMP (0:1): retransmitting phase 2 -1882105832 QM_IDLE
12:10:15: ISAKMP (0:1): sending packet to 222.222.222.222 (I) QM_IDLE
12:10:24: ISAKMP (0:1): retransmitting phase 2 QM_IDLE       871347288 ...
12:10:24: ISAKMP (0:1): deleting SA reason "death by retransmission P2"
state (I) QM_IDLE       (peer 222.222.222.222) input queue 0
12:10:24: ISAKMP (0:1): sending packet to 222.222.222.222 (I) MM_NO_STATE
12:10:24: ISAKMP (0:1): purging node -1157971078
12:10:24: ISAKMP (0:1): deleting node -1882105832 error TRUE reason "death
by retransmission P2"
12:10:24: ISAKMP (0:1): deleting node 871347288 error TRUE reason "death by
retransmission P2"
12:10:25: ISAKMP (0:1): purging node -1625961023
12:10:34: ISAKMP: received ke message (3/1)
12:10:34: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src
111.111.111.111 dst 222.222.222.222 for SPI 0x0
12:10:54: ISAKMP (0:1): purging node -1556838916
12:11:14: ISAKMP (0:1): purging node -1882105832
12:11:14: ISAKMP (0:1): purging node 871347288
12:11:24: ISAKMP (0:1): purging SA.

 stessi problemi?
successo anche a me con alcuni ios vecchi.
reboot anche dell'atro router e via.
un mayhem e le cose strane
-- 
 Everyone is gay, with someone's else ass 
 Cisco  FAQ: 
http://mayhem.oltrelinux.com/icrc
 SPP  wpage: 
http://www.spippolatori.com
 Key on 
pgp.mit.edu
 ID C7393613

Posta la configurazione