ASA to router VPN building

radutily1 · ‎10-22-2008

Hello guys,

I've got a problem while building VPN tunnel between cisco 1841 router and ASA 5510. The vpn tunnel is coming up only from firewall side.

Who can advise?

husycisco · ‎10-22-2008

Hello Ilya,

Please post us the configs of both sides. There may be an issue with the interesting traffic ACL in router

Regards

radutily1 · ‎10-23-2008

Hello,

The configs are just the same as in the example. See attachment.

Thanks!

husycisco · ‎10-23-2008

Configs look valid, try the follwoing

no ip nat pool branch 172.17.63.230 172.17.63.230 netmask 255.255.255.0

ip nat inside source route-map nonat interface f0/0 overload

no ip nat inside source route-map nonat pool branch overload

Run the following debugs in router, then initiate an interesting traffic and paste the debug output

debug crypto ipsec

debug crypto isakmp

husycisco · ‎10-23-2008

also add this into router

crypto ipsec security-association lifetime seconds 3600