Technical Note: Log message 'ignoring request to establish IPsec SA, no policy configured'

[rsagar_FTNT]

Description

This article concerns the issue where VPN phase 1 is not coming up for a route based VPN and the debug logs are showing the message:

ignoring request to establish IPsec SA, no policy configured.

Solution

To remedy this, ensure that there is at least one security policy where one of the interfaces is a VPN tunnel interface and there is at least one route which uses the tunnel interface as the gateway.