
When deploying a site-to-site IKEv1 [IPSec](/ipsec) [VPN](/vpn) on a Cisco [ASA](/asa) using certain version 9.1.x software, you may receive the following error:

```
ASA1(config)# crypto ikev1 enable OUTSIDE
ERROR: CTM ipsec poll ctl DU_IOCTL_RESUME_POLL ioctl failed.
```

This seems to be a bug that has to do with certain 9.1.x versions. This behavior has been experienced usually after an ASA software upgrade to one of these versions, but according to some, the problem does not disappear after the software is downgraded to a previously working version. Others have had to open TAC cases to resolve it.

There doesn’t seem to be any published solution to the issue beyond approaching TAC.

## Links

https://networklessons.com/cisco/asa-firewall/cisco-asa-site-site-ikev1-ipsec-vpn

ASA CTM ipsec poll ctl DU_IOCTL_RESUME_POLL ioctl failed error

802.11 EAPOL-Key Frames

802.1X Timeout and Failover Mechanisms in Network Authentication

AAA  Accounting start-stop and start-only

AAA - configuring a fallback method

AAA - radius-server host command deprecated

AAA 802.1X Multi-Auth Mode for Multiple Devices on a Single Port

AAA RADIUS UDP Port Number

AAA RADIUS vs TACACS+

AAA start-stop and stop-only

ACL - Applying in a VRF environment

ACL - Sequence Numbers

ACL Editor on Cisco IOS

ACL IPv6 implicit statements

ACL Logging

ACL log update threshold on Cisco IOS

ACL logging matched packets

ACL resequence command on Cisco NX-OS

ACL wildcard mask

ACLs Filtering Locally Generated Traffic

ARP Message Header and Payload

ARP table default timeout

ARP table

ARP to Determine Next Hop IP Address

ASA - ASDM Cipher security levels

ASA - ASDM

ASA - AnyConnect Management VPN Tunnel

ASA - Clientless VPN

ASA - Crypto key size for Version 9.16

ASA - IKE proposal parameters

ASA - Optimizing High Availability

ASA - Understanding NAT behavior with DMZ Subnet

ASA - Using FQDN in an ACL for VPN split tunnelling

ASA - VTI VPN and MSS

ASA - crypto hardware processing

ASA - emulating an ASA device

ASA - multiple AnyConnect packages

ASA - multiple VPNs between the same endpoints

ASA - number of crypto maps per interface

ASA - object group protocol vs service

ASA - same-security-traffic command

ASA - split-tunnel-policy command

ASA - using FQDN in an ACL

ASA Contexts operate as separate virtual devices

ASA DDoS protection

ASA DMZ

ASA ECMP static routing

ASA Manual NAT and Auto NAT

ASA NAT control

ASA NAT port forwarding multiple ports to same IP

ASA NAT translate_hits and untranslate_hits counters

ASA NAT with DHCP assigned IP address on outside interface

ASA NAT with multiple inside subnets

ASA Site-to-Site IKEv1 IPSec VPN recv errors

ASA Static one to one NAT on a range of addresses

ASA Troubleshoot HTTP and ASDM access

ASA VPN with overlapping IP address spaces

ASA active-standby failover preemption

ASA and Firepower reimaging

ASA crypto map and tunnel group preshared keys

ASA group policies

ASA implicit rule

ASA limit CLI and ASDM access to specific users

ASA packet processing algorithm

ASA prerequisites for high availability

ASA redirect IP SLA messages to log buffer

ASA redundant interface

ASA security levels

ASA syslog logging in multiple context mode

ASA to Firepower migration

ASA troubleshooting IPSec

ASA tunnel-group

ASA understanding version numbers

ASA what triggers an active-standby failover

ASA won't respond to pings from different subnet

ASBR Behavior with External Type 2 OSPF Routes

Access-List (ACL) Operators

Access-List (ACL)

Anycast Host Addressing

Anycast

Audio and Video over IP Networks

Automation - Ansible connection plugins

BFD - Control Plane Independent (CPI) bit

BFD - intervals and timers

BFD - slow-timers

BFD - with multiple routing protocols

BFD Session Troubleshooting

BFD echo mode and operation details

BFD how an administrative change differs from a failure

BFD one-arm echo

BGP - AFI and SAFI

BGP - AS_Path filtering use cases

BGP - Accumulated IGP metric

BGP - Atomic Aggregate Attribute

BGP - Autonomous System (AS)

BGP - Autonomous System Number

BGP - BGP Algorithm within confederations