Hello,
I have a cellular modem, Airlink Raven X, connected to WAN port of Cisco router 871.
Neither site to site VPN nor EZVPN do come up.
The debug crypto isakmp gives me the following result:
*Apr 1 19:09:05.083: ISAKMP: Unlocking peer struct 0x84223770 for isadb_mark_sa
_deleted(), count 0
*Apr 1 19:09:05.083: ISAKMP: Deleting peer node by peer_reap for W.X.Y.Z: 8
4223770
*Apr 1 19:09:05.083: ISAKMP:(0):deleting node 102384373 error FALSE reason “IKE
deleted”
*Apr 1 19:09:05.083: ISAKMP:(0):deleting node -145314910 error FALSE reason “IK
E deleted”
*Apr 1 19:09:05.083: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
*Apr 1 19:09:05.083: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_DEST_SA
*Apr 1 19:09:09.883: ISAKMP:(0): retransmitting phase 1 AG_INIT_EXCH…
*Apr 1 19:09:09.883: ISAKMP (0:0): incrementing error counter on sa, attempt 3
of 5: retransmit phase 1
*Apr 1 19:09:09.883: ISAKMP:(0): retransmitting phase 1 AG_INIT_EXCH
*Apr 1 19:09:09.883: ISAKMP:(0): sending packet to A.B.C.D my_port 500 pe
er_port 500 (I) AG_INIT_EXCH
*Apr 1 19:09:09.883: ISAKMP:(0):Sending an IKE IPv4 Packet.
*Apr 1 19:09:19.883: ISAKMP:(0): retransmitting phase 1 AG_INIT_EXCH…
*Apr 1 19:09:19.883: ISAKMP (0:0): incrementing error counter on sa, attempt 4
of 5: retransmit phase 1
*Apr 1 19:09:19.883: ISAKMP:(0): retransmitting phase 1 AG_INIT_EXCH
*Apr 1 19:09:19.883: ISAKMP:(0): sending packet to A.B.C.D my_port 500 pe
er_port 500 (I) AG_INIT_EXCH
*Apr 1 19:09:19.883: ISAKMP:(0):Sending an IKE IPv4 Packet.
*Apr 1 19:09:29.883: ISAKMP:(0): retransmitting phase 1 AG_INIT_EXCH…
*Apr 1 19:09:29.883: ISAKMP (0:0): incrementing error counter on sa, attempt 5
of 5: retransmit phase 1
*Apr 1 19:09:29.883: ISAKMP:(0): retransmitting phase 1 AG_INIT_EXCH
*Apr 1 19:09:29.883: ISAKMP:(0): sending packet to A.B.C.D my_port 500 pe
er_port 500 (I) AG_INIT_EXCH
*Apr 1 19:09:29.883: ISAKMP:(0):Sending an IKE IPv4 Packet.
*Apr 1 19:09:35.083: ISAKMP:(0): SA request profile is (NULL)
*Apr 1 19:09:35.083: ISAKMP: Created a peer struct for W.X.Y.Z, peer port 5
00
*Apr 1 19:09:35.083: ISAKMP: New peer created peer = 0x8398F440 peer_handle = 0
x8000000A
*Apr 1 19:09:35.083: ISAKMP: Locking peer struct 0x8398F440, refcount 1 for isa
kmp_initiator
*Apr 1 19:09:35.083: ISAKMP: local port 500, remote port 500
*Apr 1 19:09:35.083: ISAKMP: set new node 0 to QM_IDLE
*Apr 1 19:09:35.083: ISAKMP: Find a dup sa in the avl tree during calling isadb
_insert sa = 83683FF4
*Apr 1 19:09:35.083: ISAKMP:(0):Can not start Aggressive mode, trying Main mode
.
*Apr 1 19:09:35.083: ISAKMP:(0):found peer pre-shared key matching W.X.Y.Z
*Apr 1 19:09:35.087: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
*Apr 1 19:09:35.087: ISAKMP:(0): constructed NAT-T vendor-07 ID
*Apr 1 19:09:35.087: ISAKMP:(0): constructed NAT-T vendor-03 ID
*Apr 1 19:09:35.087: ISAKMP:(0): constructed NAT-T vendor-02 ID
*Apr 1 19:09:35.087: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
*Apr 1 19:09:35.087: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1
*Apr 1 19:09:35.087: ISAKMP:(0): beginning Main Mode exchange
*Apr 1 19:09:35.087: ISAKMP:(0): sending packet to W.X.Y.Z my_port 500 peer
_port 500 (I) MM_NO_STATE
*Apr 1 19:09:35.087: ISAKMP:(0):Sending an IKE IPv4 Packet.
*Apr 1 19:09:38.651: ISAKMP:(0):purging SA., sa=842B12EC, delme=842B12EC
*Apr 1 19:09:39.883: ISAKMP:(0): retransmitting phase 1 AG_INIT_EXCH…
*Apr 1 19:09:39.883: ISAKMP:(0):peer does not do paranoid keepalives.
*Apr 1 19:09:39.883: ISAKMP:(0):deleting SA reason “Death by retransmission P1”
state (I) AG_INIT_EXCH (peer A.B.C.D)
*Apr 1 19:09:39.883: %CRYPTO-6-EZVPN_CONNECTION_DOWN: (Client) User= Group=vp
ngrp Client_public_addr=192.168.13.100 Server_public_addr=A.B.C.D
*Apr 1 19:09:39.883: ISAKMP:(0):deleting SA reason “Death by retransmission P1”
state (I) AG_INIT_EXCH (peer A.B.C.D)
*Apr 1 19:09:39.883: ISAKMP: Unlocking peer struct 0x83CF266C for isadb_mark_sa
_deleted(), count 0
The interesting point is that when I connect the cable modem to the same router, it works fine, but with this cellular modem.
Any suggestion?
Thanks,
Mehdi