Hi Techies,
I am using mikroitk server hotspot and recently we given a new connection to the client he was using cisco router to connect the server via ipsec tunneling but unfortunatey he is getting the following errors in cisco console. we given global ip (175.XXX.XX.77) to the customer even it also not works and tried to open the ports of 500 & 4500 but no use.
Below Errors are getting cisco console …
*Jun 1 13:17:39.190: ISAKMP: (1001):set new node 0 to QM_IDLE
*Jun 1 13:17:39.190: ISAKMP-ERROR: (1001):SA is still budding. Attached new ipsec request to it. (local 175.XXX.XX.77, remote 116.XX.1X.XX6)
*Jun 1 13:17:39.193: ISAKMP-ERROR: (0):Error while processing SA request: Failed to initialize SA
*Jun 1 13:17:39.193: ISAKMP-ERROR: (0):Error while processing KMI message 0, error 2…
*Jun 1 13:17:43.750: ISAKMP: (1001):retransmitting phase 1 MM_KEY_EXCH…
*Jun 1 13:17:43.750: ISAKMP: (1001):: incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
*Jun 1 13:17:43.750: ISAKMP: (1001):retransmitting phase 1 MM_KEY_EXCH
*Jun 1 13:17:43.750: ISAKMP-PAK: (1001):sending packet to 116.XX.1X.XX6 my_port 500 peer_port 500 (I) MM_KEY_EXCH
*Jun 1 13:17:43.750: ISAKMP: (1001):Sending an IKE IPv4 Packet…
Success rate is 0 percent (0/5)
TG-R448-DC-RTL-R#
*Jun 1 13:17:53.750: ISAKMP: (1001):retransmitting phase 1 MM_KEY_EXCH…
*Jun 1 13:17:53.750: ISAKMP: (1001):: incrementing error counter on sa, attempt 5 of 5: retransmit phase 1
*Jun 1 13:17:53.750: ISAKMP: (1001):retransmitting phase 1 MM_KEY_EXCH
*Jun 1 13:17:53.750: ISAKMP-PAK: (1001):sending packet to 116.XX.1X.XX6 my_port 500 peer_port 500 (I) MM_KEY_EXCH
*Jun 1 13:17:53.750: ISAKMP: (1001):Sending an IKE IPv4 Packet.
*Jun 1 13:18:03.750: ISAKMP: (1001):retransmitting phase 1 MM_KEY_EXCH…
*Jun 1 13:18:03.750: ISAKMP: (1001):peer does not do paranoid keepalives.
*Jun 1 13:18:03.750: ISAKMP-ERROR: (1001):deleting SA reason “Death by retransmission P1” state (I) MM_KEY_EXCH (peer 116.XX.1X.XX6)
*Jun 1 13:18:03.750: ISAKMP-ERROR: (1001):deleting SA reason “Death by retransmission P1” state (I) MM_KEY_EXCH (peer 116.XX.1X.XX6)
*Jun 1 13:18:03.750: ISAKMP: (0):Unlocking peer struct 0x7F1C7A4FC050 for isadb_mark_sa_deleted(), count 0
*Jun 1 13:18:03.750: ISAKMP: (0):Deleting peer node by peer_reap for 116.XX.1X.XX6: 7F1C7A4FC050
*Jun 1 13:18:03.761: ISAKMP: (1001):deleting node 658594288 error FALSE reason “IKE deleted”
*Jun 1 13:18:03.761: ISAKMP: (1001):deleting node 410073872 error FALSE reason “IKE deleted”
*Jun 1 13:18:03.761: ISAKMP: (1001):IKE->PKI End PKI Session state (I) MM_NO_STATE (peer 116.XX.1X.XX6)
*Jun 1 13:18:03.761: ISAKMP: (1001):PKI->IKE Ended PKI Session state (I) MM_NO_STATE (peer 116.XX.1X.XX6)
*Jun 1 13:18:03.761: ISAKMP: (1001):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
*Jun 1 13:18:03.761: ISAKMP: (1001):Old State = IKE_I_MM5 New State = IKE_DEST_SA
*Jun 1 13:18:05.252: ISAKMP-PAK: (1001):received packet from 116.XX.1X.XX6 dport 500 sport 500 Global (I) MM_NO_STATE