I have set up an IPsec connection between my ASA 5520 and a partner's Juniper M7i router. Everything seems ok as far as matched settings, etc., however I see 2 ISAKMP peers when I do a show crypto isakmp sa:
6 IKE Peer: 220.127.116.11
Type : L2L Role : initiator
Rekey : no State : MM_ACTIVE
8 IKE Peer: 18.104.22.168
Type : user Role : responder
Rekey : no State : MM_WAIT_MSG3
Traffic seems to be passing okay, but this MM_WAIT_MSG3 message has me concerned. My guess is that some parameter isn't matching, but like I said, everything appears to match. Anyone run into this, and if so, how did you correct it? Thanks in advance!