We use BM37 for site-to-site VPN.

On the slave's audit log, we got such message:

(SKIP) Constuction of SA failed for peer xx.xx.xx.xx

The IP adress is the ip of hosts behind the vpn slave. The audit message
has explanation: "IPSEC failed to set up a Security Association with the
indicated connection causing packets to be dropped.", and has Action
suggestion: check for possible out of memory conditions.

The server we used is a brand new with a few GB RAM. The action seems
making no senses for me.

I tried to search the KB, found nothing.

Any suggestions?