troubleshooting Question

Cisco ASA Header Invalid (next payload = 11)

Avatar of frukeus
frukeusFlag for Singapore asked on
Linux NetworkingVPNCisco
5 Comments2 Solutions2272 ViewsLast Modified:
IP = 46.50.218.93, processing VID payload
IP = 46.50.218.93, Received DPD VID
IP = 46.50.218.93, Received NAT-Traversal RFC VID
IP = 46.50.218.93, Received NAT-Traversal ver 03 VID
IP = 46.50.218.93, Received NAT-Traversal ver 02 VID
IP = 46.50.218.93, processing VID payload
IP = 46.50.218.93, IKE SA Proposal # 1, Transform # 11 acceptable  Matches global IKE entry # 3
IP = 46.50.218.93, constructing NAT-Traversal VID ver 02 payload
IP = 46.50.218.93, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 128
IP = 46.50.218.93, IKE_DECODE RESENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 128
IP = 46.50.218.93, IKE_DECODE RESENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 128
IP = 46.50.218.93, IKE_DECODE RESENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 128
IP = 46.50.218.93, IKE MM Responder FSM error history (struct &0xdb289848)  <state>, <event>:  MM_DONE, EV_ERROR-->MM_WAIT_MSG3, EV_TIMEOUT-->MM_WAIT_MSG3, NullEvent-->MM_SND_MSG2, EV_SND_MSG-->MM_SND_MSG2, EV_START_TMR-->MM_SND_MSG2, EV_RESEND_MSG-->MM_WAIT_MSG3, EV_TIMEOUT-->MM_WAIT_MSG3, NullEvent
IP = 46.50.218.93, sending delete/delete with reason message
IP = 46.50.218.93, IKE SA MM:8b824f2c terminating:  flags 0x01000002, refcnt 0, tuncnt 0
IP = 46.50.218.93, Header invalid (next payload = 11)

I keep getting Header invalid (next payload =11) error when I connect my openswan server to ASA. I have checked my preshared key many times and it is accurate.
What else can I do?
ASKER CERTIFIED SOLUTION
MartinDRZ

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 2 Answers and 5 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 2 Answers and 5 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros