ASA 5520 IPSec Tunnel - Unable to remove PeerTblEntry

Unanswered Question

I'm trying to create a site-to-site tunnel

between an ASA 5520 and a Cisco 2800

I'm getting "Unable to remove PeerTblEntry"

Can anyone give me some insight on what

the problem might be. This is the ASA side.

There's 20 other tunnels running. I'll try and get the other side ASAP (a vendor)


name Vendor

access-list VPN_TO_VENDOR extended permit ip

access-list nonat_inside extended permit ip

access-list OUTSIDE_ACCESS_IN extended permit

nat (inside) 0 access-list nonat_inside

crypto ipsec transform-set 3DES-SHA esp-3des esp-sha-hmac

crypto map vpn_map 25 match address VPN_TO_VENDOR

crypto map vpn_map 25 set peer Vendor

crypto map vpn_map 25 set transform-set 3DES-SHA

crypto map vpn_map interface outside

isakmp enable outside

isakmp policy 20 authentication pre-share

isakmp policy 20 encryption 3des

isakmp policy 20 hash sha

isakmp policy 20 group 2

isakmp policy 20 lifetime 28800

tunnel-group type ipsec-l2l

tunnel-group ipsec-attributes

pre-shared-key *

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Farrukh Haroon Sat, 06/13/2009 - 05:41
User Badges:
  • Red, 2250 points or more

You should ignore that message I guess and look for more obvious error messages to get the tunnel up and running. What is exactly wrong with the tunnel?




This Discussion