Trouble establishing IPSec to Cisco ASR 1001X

Shuttermed — Tue, 26 Feb 2019 18:20:29 GMT

I'm working with a business partner and we've verified phase 1, phase 2 parameters. But this is what I'm seeing in logging after running test vpn ike-sa gateway:

2019-02-26 09:57:21.638 -0800 [PERR]: { 43: }: 77.77.236.54[500] - 207.99.97.218[500]:(nil) invalid ID payload.
2019-02-26 09:57:23.588 -0800 [INFO]: the packet is retransmitted from 207.99.97.218[500] to 77.77.236.54[500].
2019-02-26 09:57:25.587 -0800 [INFO]: the packet is retransmitted from 207.99.97.218[500] to 77.77.236.54[500].
2019-02-26 09:57:28.588 -0800 [INFO]: the packet is retransmitted from 207.99.97.218[500] to 77.77.236.54[500].
2019-02-26 09:57:33.372 -0800 [INFO]: the packet is retransmitted from 207.99.97.218[500] to 77.77.236.54[500].
2019-02-26 09:57:41.587 -0800 [INFO]: the packet is retransmitted from 207.99.97.218[500] to 77.77.236.54[500].
====> Failed SA: 77.77.236.54[500]-207.99.97.218[500] cookie:be99ab966426dfa8:5f94b48191d27d6d <==== Due to timeout.
====> Deleted SA: 77.77.236.54[500]-207.99.97.218[500] cookie:be99ab966426dfa8:5f94b48191d27d6d <====
====> Initiated SA: 77.77.236.54[500]-207.99.97.218[500] cookie:025d4c7c02ae26be:0000000000000000 <====

I've googled the "invalid ID payload" message but I'm not seeing much. Anyone have a thought as to what that's indicating?

Re: Trouble establishing IPSec to Cisco ASR 1001X

OtakarKlier — Tue, 26 Feb 2019 19:04:30 GMT

Hello,

What exchange mode are you using? I'm guessing there is a mismatch somewhere.

Regards,

topic Trouble establishing IPSec to Cisco ASR 1001X in General Topics

Trouble establishing IPSec to Cisco ASR 1001X

Re: Trouble establishing IPSec to Cisco ASR 1001X