Hi Massimiliano,
Can you tell me how are you testing this?
One of the features of the CAN protocol is that will keep sending the package until one node answers. If during system start-up, only one node is operating, then its TXERRCNT increases in each message it is trying to transmit, as a result of acknowledge errors (indicated by the ACKERR bit in the Error and Status Register).
One way to manage the NO ACK condition is to check how many times the TXERRCNT increase, if the error happens a certain amount of times, stop the transmition and soft reset the module to clear the error signals.
Let me know if this was helpful to you and I will wait for your comments.
Best Regards,
Alexis Andalon