Re: *Mar 1 01:38:13.295: %CRYPTO-4-IKMP_BAD_MESSAGE: IKE

Thanks All,

It is working both with 20.0.0.6 255.255.255.255 and 20.0.0.6 (without
subnet mask).

If we check both configuration ... it shows only 20.0.0.6

if we check from " sh cry ip sa " .. it shwos 20.0.0.6/255.255.255.255

once again ... thanks guys ...

cheers,
taufik kurniawan

On 05/07/2010, Farrukh Haroon <farrukhharoon_at_gmail.com> wrote:
> This message does not always imply an error, sometimes its just because of
> sessions being cleared/timeout etc. AFAIR.
>
> Try to find more meaningful debug messages in case your VPN is not working
> or not behaving as it should (e.g. frequently timing out).
>
> Regards
>
> Farrukh
>
> On Mon, Jul 5, 2010 at 7:34 PM, Taufik Kurniawan <ktaufik_at_gmail.com> wrote:
>
>> Can anybody help why ?
>>
>>
>> R4
>>
>> crypto isakmp policy 1
>> encr 3des
>> authentication pre-share
>> group 2
>> !
>> crypto isakmp policy 2
>> encr aes 256
>> authentication pre-share
>> group 5
>> crypto isakmp key keynya address 20.0.0.5 255.255.255.0
>> crypto isakmp key kuncikunci address 20.0.0.6 255.255.255.0
>> !
>> !
>> crypto ipsec transform-set transetnya esp-3des esp-sha-hmac
>> crypto ipsec transform-set transet3 esp-aes 256 esp-sha-hmac
>> !
>> crypto ipsec profile profile3
>> set transform-set transet3
>> !
>> crypto ipsec profile profilenya
>> set transform-set transetnya
>> !
>> interface Loopback0
>> ip address 202.155.40.1 255.255.255.0
>> !
>> interface Tunnel45
>> ip address 202.155.0.9 255.255.255.252
>> tunnel source FastEthernet0/0
>> tunnel destination 20.0.0.5
>> tunnel mode ipsec ipv4
>> tunnel protection ipsec profile profilenya
>> !
>> interface Tunnel46
>> ip address 202.155.0.13 255.255.255.252
>> tunnel source FastEthernet0/0
>> tunnel destination 20.0.0.6
>> tunnel mode ipsec ipv4
>> tunnel protection ipsec profile profile3
>> !
>> interface FastEthernet0/0
>> ip address 20.0.0.4 255.255.255.0
>> duplex auto
>> speed auto
>> !
>>
>>
>> R5
>> crypto isakmp policy 1
>> encr 3des
>> authentication pre-share
>> group 2
>> crypto isakmp key keynya address 20.0.0.4 255.255.255.0
>> !
>> !
>> crypto ipsec transform-set transetnya esp-3des esp-sha-hmac
>> !
>> crypto ipsec profile profilenya
>> set transform-set transetnya
>> !
>> !
>> !
>> !
>> !
>> !
>> !
>> !
>> interface Loopback0
>> ip address 202.155.50.1 255.255.255.0
>> !
>> interface Tunnel0
>> ip address 202.155.0.10 255.255.255.252
>> tunnel source FastEthernet0
>> tunnel destination 20.0.0.4
>> tunnel mode ipsec ipv4
>> tunnel protection ipsec profile profilenya
>> !
>>
>> R6
>>
>> !
>> crypto isakmp policy 2
>> encr aes 256
>> authentication pre-share
>> group 5
>> crypto isakmp key kuncikunci address 20.0.0.4 255.255.255.0
>> !
>> !
>> crypto ipsec transform-set transet3 esp-aes 256 esp-sha-hmac
>> !
>> crypto ipsec profile profile3
>> set transform-set transet3
>> !
>> !
>> !
>> !
>> !
>> !
>> !
>> !
>> interface Tunnel0
>> ip address 202.155.0.14 255.255.255.252
>> tunnel source FastEthernet0
>> tunnel destination 20.0.0.4
>> tunnel mode ipsec ipv4
>> tunnel protection ipsec profile profile3
>> !
>> interface Ethernet0
>> no ip address
>> shutdown
>> half-duplex
>> !
>> interface FastEthernet0
>> ip address 20.0.0.6 255.255.255.0
>> speed auto
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue Jul 06 2010 - 08:36:23 ART