ASA point-to-point VPN problem

[Tero Kaira]

Hi,

i have VPN-tunnel up between ASA5512X <-> ASA5512X.

There is one laptop also connected to both ASA's LAN-port and ping between these laptops through tunnel success 100%.

But when I remove another laptop and replace it -> router device with same IP-address as laptop, VPN-tunnel goes down and ping fails. Why's that?

Router's port is configured as access vlan mode.

Thanks for help.

[rvarelac]

Hi TernoTurtia82,

I would recommend you to use :

• Debug crypto ipsec 128
• Debug crypto isakmp 128  

And drop the tunnel to see what's happening exactly or what changes on the config. 

-Hope this helps -

[nkarthikeyan]

Hi,

Have you set the right default gateway on the router.... ip routing is enabled and when you give show ip route it show the def route info as well as directly connected information.....

Please do capture the traffic in ASA and check the traffic router is hitting the asa and going out and coming back....

if it hits an FW and goes out... then you can see sh isakmp sa and sh ipsec sa output.... in phase 2 oputput if you see encaps or decap not happening the ex[ected way... then you can go and check on the other end if everything is okay or not.....

FW# debug crypto ikev1/2 7

FW#debug crypto ipsec 7

Regards

Karthik