VPN between two ASA 5520

denaumcisco · ‎02-19-2009

Good night guys,

I configurated two ASA and the vpn didnt work, what is wrong?

Here is the vpn configuration and the results

crypto isakmp policy 10 hash md5

crypto isakmp policy 10 authentication pre-share

crypto isakmp enable outside

crypto map mymap 10 match address 100

access-list 100 permit ip 172.16.3.0 255.255.255.0 172.16.1.0 255.255.255.0

crypto ipsec transform-set myset esp-des esp-hd5-hmac

crypto map mymap 10 set peer 10.22.12.22

crypto map mymap 10 set transform-set myset

crypto map mymap interface outside

Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)

Total IKE SA: 1

1 IKE Peer: 10.12.28.5

Type : user Role : initiator

Rekey : no State : MM_WAIT_MSG4

eddie.mitchell · ‎02-19-2009

There are several required entries that seem to be missing from your configuration. Please reference the following document:

I would also strongly recommend against using DES encryption and md5 hashing.

denaumcisco · ‎02-19-2009

OK Eddie, I ll try