From: zhencai (zhencai@xxxxxxxx)
Date: Wed Jan 19 2000 - 03:21:47 GMT-3
Hi,
I'm trying to configure IPSec using IKE with RSA, but had this problem:
after packet reach the other side, router generated:
r1#
00:31:36: %IPFAST-2-PAKSTICK: Corrupted pak header for Serial0, flags 0x20
-Traceback= 31331C4 399E130 3994C24 39942B8
what does the Corrupted pak header stand for? I couldn't locate the error
message at CCO. error code 2 seems to be a pretty serious problem.
I think my configuration is good:
r1#sh crypto isa sa
dst src state conn-id slot
10.2.1.2 10.2.1.1 QM_IDLE 4 0
r1#sh crypto ipsec sa
interface: Serial0
Crypto map tag: MAP, local addr. 10.2.1.1
local ident (addr/mask/prot/port): (10.1.0.0/255.255.0.0/0/0)
remote ident (addr/mask/prot/port): (10.5.0.0/255.255.0.0/0/0)
current_peer: 10.2.1.2
PERMIT, flags={origin_is_acl,}
#pkts encaps: 4, #pkts encrypt: 4, #pkts digest 0
#pkts decaps: 4, #pkts decrypt: 4, #pkts verify 0
#send errors 1, #recv errors 0
<omitted>
Thanks a lot.
Zhen Cai
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:22:45 GMT-3