IPsec from ASA 7.23 to Juniper M7i router - MM_WAIT_MSG3

Unanswered Question

I have set up an IPsec connection between my ASA 5520 and a partner's Juniper M7i router. Everything seems ok as far as matched settings, etc., however I see 2 ISAKMP peers when I do a show crypto isakmp sa:

6 IKE Peer:

Type : L2L Role : initiator

Rekey : no State : MM_ACTIVE

8 IKE Peer:

Type : user Role : responder

Rekey : no State : MM_WAIT_MSG3

Traffic seems to be passing okay, but this MM_WAIT_MSG3 message has me concerned. My guess is that some parameter isn't matching, but like I said, everything appears to match. Anyone run into this, and if so, how did you correct it? Thanks in advance!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion