Hi Guys,

We have an existing L2L VPN tunnel with five other sites using an ASA5505 firewall. 

Recently, we deployed 5 more firewall to our additional sites, but this time VPN doesn't work.

Our configuration is a mirror of our existing 5505s except for the local subnet and the global IP add.

I have tried to debug the problem by using:

• debug crypto isakmp—Displays the ISAKMP           negotiations of Phase 1.

• debug crypto ipsec—Displays the IPsec           negotiations of Phase 2.

and still not getting any viable information.

My question is:

1. Is there a known issue or limitation with ISR2851 IOS ver 12.4(24)T regarding L2L VPN?

2. Should I upgrade to the latest and greatest, which is ver 15.1(1)XB (ED)?
3. What other IPSec CLI or switches could I use to refine my debugging commands?

Your help is greatly appreciated.

Thanks.

JP