cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
387
Views
1
Helpful
1
Replies

CSCvr50645-GETVPN-Reg/Rekey policies on a GM

ivargasg
Level 1
Level 1

Failure in GETVPN between GM and Key server does not install policies, it worked well but after approximately 72 days the equipment begins to fail.

KeyServer CISCO 2921// (C2900-UNIVERSALK9-M), Version 15.7(3)M8

GM CISCO 4331 // ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 17.4.1a

 

Logs en KS

%GDOI-4-NEWER_GM_VERSION_REGISTER: WARNING: GM 198.18.10.14 registers to group group1 with newer GDOIversion than KS. Please check'show crypto gdoi ks members' and 'show crypto gdoi feature' to ensure all GMs can support the GETVPN features enabled.

 

Logs en GM

Nov 30 10:55:35.789: %GDOI-5-GM_FAILED_TO_INSTALL_POLICIES: FAILED: Installation of Reg/Rekey policies from KS 198.18.10.1 for group group1 & gm identity  198.18.10.15

 

Thanks!

 

1 Reply 1

Share config of one GM and KS.

MHM