From: Merv on
> Router#sho ver
> Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version
> 12.4(12), RELEASE SOFTWARE (fc1)


IOBTW IOS 12.4(12) has been yanked by Cisco.

You should upgrade to a newer maintenance version of 12.4




From: Merv on
> 2. return to original config


.. . .I've done just this.


> 3. capture debug isakmp sa


I did that, but the only error I was seeing was


=========================================

Mike, it looks like your reply got clipped.


Did you see any issues in the output of debug isakmp sa for the
original config ?





From: Mike Gauthier on
On Sun, 11 Nov 2007 11:02:03 -0800, Merv wrote:

>> 2. return to original config
>
>
> . . .I've done just this.
>
>
>> 3. capture debug isakmp sa
>
>
> I did that, but the only error I was seeing was
>
>
> =========================================
>
> Mike, it looks like your reply got clipped.
>
>
> Did you see any issues in the output of debug isakmp sa for the original
> config ?

Weird. My post did get clipped.

The only error I saw from my debug isakmp was the following.

ISAKMP0:54:HW:2):deleting SA reason "Recevied fatal informational" state
(I) QM_IDLE (peer 10.1.1.10)

I'd get QM_IDLE for a second and then that error. I see nothing in Phase
2. No send errors, no encrypt/decrypt errors. Nothing.

Got your email BTW. Thank you.

MikeG
From: Merv on

Mike,

1. Upgrade IOS software to a supported maintenance release

2. test IPSEC profile using crypto map command on the FastEtherent
interface
crypto map V1TEST 10 ipsec-isakmp profile V1

From: Merv on


Also try disable agressive mode to see if it make any difference

crypto isakmp aggressive-mode disable