topic phase-2 sa purge mismatch SPI:0x00000000/0x07A04C1A in General Topics

phase-2 sa purge mismatch SPI:0x00000000/0x07A04C1A

MP18 — Thu, 02 May 2019 19:07:48 GMT

i am able to establish tunnel with vendor

can ping the vendor lan ip

but ikemgr shows

2019-05-02 13:01:54.000 -0600 [PWRN]: { : 94}: phase-2 sa purge mismatch SPI:0x00000000/0x07A04C1A.

Re: phase-2 sa purge mismatch SPI:0x00000000/0x07A04C1A

OtakarKlier — Fri, 03 May 2019 17:46:52 GMT

Hello,

If the tunnel is up then and passing traffic its good? Not sure on the error, you might want to open a support case on it.

Regards,

Re: phase-2 sa purge mismatch SPI:0x00000000/0x07A04C1A

MP18 — Fri, 03 May 2019 17:56:14 GMT

now we are getting this error

tunel comes up both phase 1 and 2 are green

status on cli shows active

( description contains 'IKE phase-2 negotiation is failed as initiator, quick mode. Failed SA: x.x.x[500]-x.x.xx[500] message id:0xFF762365. Due to negotiation timeout.' )

Re: phase-2 sa purge mismatch SPI:0x00000000/0x07A04C1A

MP18 — Fri, 03 May 2019 19:10:37 GMT

also system log shows

( description contains 'IKE protocol notification message received: INITIAL-CONTACT (24578).' )

Re: phase-2 sa purge mismatch SPI:0x00000000/0x07A04C1A

SutareMayur — Fri, 23 Apr 2021 06:31:44 GMT

@MP18, Just wanted to check if this issue is resolved? All of sudden we have started facing similar issues on few tunnels. Thanks