300-730 SVPN: Implementing Secure Solutions with Virtual Private Networks

By Cisco · Question Mode

QuestionQ1

Site-to-site Virtual Private Networks on Routers and Firewalls

An engineer is troubleshooting a new DMVPN configuration on a Cisco IOS router. After issuing the show crypto isakmp sa command, the returned response is MM_NO_STATE. Why does this failure occur?

Explanation

An ISAKMP MM_NO_STATE result means that an IKE/ISAKMP Phase 1 security association has not been established. The peers must have matching Phase 1 policy parameters, such as authentication method, encryption, hash, Diffie-Hellman group, and lifetime, for the negotiation to proceed.

Community Discussion

No comments yet. Be the first to start the discussion!