IPSEC commit error "syntax error [peers_sa_ipaddr]" in module ikemgr?

snocc — Wed, 22 Aug 2012 22:31:20 GMT

When adding additional VPN tunnels, I get this failure to commit:

> show jobs id 81

Enqueued ID Type Status Result Completed

--------------------------------------------------------------------------

2012/08/22 17:59:43 81 Commit FIN FAIL 18:00:49

Warnings:

Details:Config commit phase 1 aborted(Module: device)

ERROR: line:509: syntax error [peers_sa_ipaddr]

(Module: ikemgr)

Commit failed

I don't see anything different about these new IPSEC tunnels that we didn't do with the previous 6 tunnels which were successfully configured and committed. What would trigger this message?

Re: IPSEC commit error "syntax error [peers_sa_ipaddr]" in module ikemgr?

zarina — Wed, 22 Aug 2012 23:22:06 GMT

Hello,

You get that error message if you have identical proxy ids or missing fields in ike/ipsec profiles. For the tunnel you newly configured, I would suggest committing the changes in multiple steps to isolate the issue:

1. delete the tunnel and commit

2. add the tunnel and commit

3. add proxy ids if any and commit

Thanks,

Sri

topic Re: IPSEC commit error "syntax error [peers_sa_ipaddr]" in module ikemgr? in General Topics

IPSEC commit error "syntax error [peers_sa_ipaddr]" in module ikemgr?

Re: IPSEC commit error "syntax error [peers_sa_ipaddr]" in module ikemgr?