vpn tu Error fetching sa from table

[Romaryo]

Hello! when I run the command vpn tu -> 1, 2, 3) in the output I see "Error fetching sa from table". it is OK? or what could be the cause?

we have adjusted VPN parameters for RA VPN (Global Properties > Remote Access > VPN – Authentication > Under “Encryption Algorithms” press “Edit” > Edit the encryption algorithms as desired.

)
and after that not all clients want to accept new parameters.

every 10 minutes the GW changes the ESP to the old value. and we get disconnection and in the log two events "Key Install".

How to delete all SA ? For example, if I make vpn tu 5,7,6,8 for certain IPs, the entries remain in the output. How does it work ?

R81.10 Take 94 (VPN Client 86.80)

Thanks for your help!

********** Select Option **********

(1) List all IKE SAs
(2) * List all IPsec SAs
(3) List all IKE SAs for a given peer (GW) or user (Client)
(4) * List all IPsec SAs for a given peer (GW) or user (Client)
(5) Delete all IPsec SAs for a given peer (GW)
(6) Delete all IPsec SAs for a given User (Client)
(7) Delete all IPsec+IKE SAs for a given peer (GW)
(8) Delete all IPsec+IKE SAs for a given User (Client)
(9) Delete all IPsec SAs for ALL peers and users
(0) Delete all IPsec+IKE SAs for ALL peers and users

* To list data for a specific CoreXL instance, append "-i <instance number>" to your selec

(Q) Quit

*******************************************

3

Enter IP of peer (format: xxx.xxx.xxx.xxx): 172.20.2.32
Error fetching sa from table

Peer 172.20.2.32, user md5 3b74fa48e00d1fd8:

Realm: vpn

Machine cert authentication: false

IKE SA <dcf7df511781a912,0d688db392a5bb63>

Peer 172.20.2.32, user md5 4887fe35c30ce40f:

Realm:

Machine cert authentication: false

IKE SA <9be3902bb82733b6,dbed1af13344d743>

Hit <Enter> key to continue ...

[the_rock]

If you advise what settings you put in there, I can try it in the lab and see if I get the same in R81.20

Andy