We have a DMVPN Cisco Hub and around 6 Spoke routes working with certificates throught a Cisco CA server (C2800NM-ADVIPSERVICESK9-M). It was working propertly but a couple of days ago I had to reboot one of the spoke routers (which I had reload before many times).
After rebooting the spoke router, the DMVPN tunnel didn?t come up because some problem with the cert:
CET: ISAKMP:(0):No pre-shared key with x.x.x.x!
CET: ISAKMP:(0):No pre-shared key with x.x.x.x!
CET: ISAKMP:(4010):My ID configured as IPv4 Addr, but Addr not in Cert!
CET: ISAKMP:(4010):Using FQDN as My ID
CET: ISAKMP:(4010): Unable to get DN from certificate!
CET: ISAKMP:(4010): Cert presented by peer contains no OU field.
CET: ISAKMP:(0):Can’t decrement IKE Call Admission Control stat outgoing_active since it’s already 0.
I am not so familiar with CA configuration, and I don?t understand why this router cannot recover the vpn tunnel since it was properly working before the reboot. Can someone point me on the right way to check what could append with the spoke router?
Thanks in forward.
JC
