Description

This article describes possible action plan you may take to recover device when ike daemon is not responding. 

 

Symptoms

You may see error like mentioned below:

FW> show security ike security-associations 
error: IKE-Config-Management not responding to management requests

Solution

This issue can occur when the IKE/KMD process is not running on the device. This may be due to configuration issues or an internal process failure.

 

Check if the required process is running:

show system processes extensive | match ike
 
root@device> show system processes extensive | match ike   
93744 root  20  0  751M  12M select  0  36:51  0.00% iked
93743 root  20  0  742M  4616K select  0  0:10  0.00% ikemd
``
or show system processes extensive | match kmd
 
root@device> show system processes extensive | match kmd   
2180 root  20  0  59140K  21180K select  0  1:08  0.00% kmd
 
Verify configuration for any issues
 
As a workaround, you can take a gcore and restart the process
start shell user root
gcore -c <gcore-file-name> <pid>
 
restart ipsec-key-management or  restart ike-key-management
 

If the issue persists after restarting:

  • Collect logs and core files
  • Contact JTAC for further investigation and root cause analysis
 
 

Modification History

2024-10-07 : Article Created