IPSEC commit error "syntax error [peers_sa_ipaddr]" in module ikemgr?

[snocc]

When adding additional VPN tunnels, I get this failure to commit:

> show jobs id 81

Enqueued                     ID             Type    Status Result Completed

--------------------------------------------------------------------------

2012/08/22 17:59:43          81           Commit       FIN   FAIL 18:00:49

Warnings:

Details:Config commit phase 1 aborted(Module: device)

ERROR: line:509: syntax error [peers_sa_ipaddr]

(Module: ikemgr)

Commit failed

>

I don't see anything different about these new IPSEC tunnels that we didn't do with the previous 6 tunnels which were successfully configured and committed.   What would trigger this message?

[zarina · Accepted solution]

Hello,

You get that error message if you have identical proxy ids or missing fields in ike/ipsec profiles. For the tunnel you newly configured, I would suggest committing the changes in multiple steps to isolate the issue:

1. delete the tunnel and commit

2. add the tunnel and commit

3. add proxy ids if any and commit

Thanks,

Sri