Ikev2 Phase2 is not getting up

[MaheshCheck]

Can anyone help me to resolve the issue

IKEv2 Phase2 is not getting up and configuration seems to be fine from both the sides

Version :R81.20

[the_rock]

Hey,

Im in the zoom meeting waiting, so if you are free, please join, Im good till 2.30 pm est.

Andy

[the_rock]

Hey Mahesh,

Just send me your email in direct message, we can connect offline. Not sure what country you are in, but Im in Canada EST (GMT-5)

Andy

[MaheshCheck]

I am in india(IST) GMT+5:30

[the_rock]

Just messaged you offline.

Andy

[the_rock · Accepted solution]

Hey everyoone,

Just to update on this, had zoom remote with @MaheshCheck and below are my notes. I feel good now if Cisco side resets the tunnel, it will work fine, but Mahesh will let us know for sure once they do it.

Andy

NOTES FROM THE CALL:

-zoom with Mahesh
-we enabled tunnel mgmt as per gateway since its combo of hosts/subnets
-installed policy
-first time config, never worked before
-Cisco mentioned phase 2 selectors are not matching
-peer ip x.x.x.x

below guidbedit settings should be set to FALSE to avoid any supernetting:

ike_enable_supernet

ike_p2_enable_supernet_from_R80.20

ike_use_largest_possible_subnets

peer -> xyz_gateway

we made sure guidbedit settings were set to false, changed last one -> ike_use_largest_possible_subnets

installed policy -> now tunnel shows UP

Mahesh will ask other side to check tomorrow and let us know

[the_rock]

Hey mate,

Happy New Year! Just wanted to confirm if you were able to solve this?

Andy

[MaheshCheck]

@the_rock  sorry i missed your message .

The issue has been resolved now .We selected  super subent(single subnet) from both sides and your suggestion helped us to resolve this issue Thank you 

[the_rock]

Glad its working.

Andy