Ok, here a updated on the problem i am having
1.1.1.1 is the other company network
2.2.2.2 is my network
I used ASDM i go to
Configuration > Site-to-Site VPN > Advanced > Crypto Maps
we used the same tunnel that is working and change the Peer Setting
Remove the old IP address and add the new IP address
when i check the connection profiles the old connection disappear
so i went back to crypto maps peer setting i added the old ip address back in there
connection profile came back
did not work, i could not get phase 1 to work at all
this is the error message i see
Group = 1.1.1.1, IP = 1.1.1.1, Can't find a valid tunnel group, aborting...!
Aug 13 2014 16:32:40: %ASA-7-715065: Group = 1.1.1.1, IP = 1.1.1.1, IKE MM Initiator FSM error history (struct &0x725cd4e8) <state>, <event>: MM_DONE, EV_ERROR-->MM_BLD_MSG5, EV_GROUP_LOOKUP-->MM_BLD_MSG5, EV_TEST_CERT-->MM_BLD_MSG5, EV_SECRET_KEY_OK-->MM_BLD_MSG5, NullEvent-->MM_BLD_MSG5, EV_GEN_SECRET_KEY-->MM_WAIT_MSG4, EV_PROCESS_MSG-->MM_WAIT_MSG4, EV_RCV_MSG
Aug 13 2014 16:32:40: %ASA-7-713906: Group = 1.1.1.1, IP = 1.1.1.1, IKE SA MM:6696bf2a terminating: flags 0x0100c022, refcnt 0, tuncnt 0
Aug 13 2014 16:32:40: %ASA-7-713906: Group = 1.1.1.1, IP = 1.1.1.1, sending delete/delete with reason message
Aug 13 2014 16:32:40: %ASA-4-713903: IP = 1.1.1.1, Header invalid, missing SA payload! (next payload = 4)
I restore the old tunnel back to pervouis config and add a new tunnel config
I did not remove the old tunnel as well
In ASDM i created a new tunnel with the new ip address same local and remote groups and same group policy same filter instant the phase 1 is complete
phase 2 is working but not working i can recieve data but i cant send out any data
Crypto map tag: outside_map, seq num: 4, local addr: 2.2.2.2
access-list outside_4_cryptomap extended permit ip 10.48.0.0 255.255.252.0 10.20.0.0 255.255.0.0
local ident (addr/mask/prot/port): (10.48.0.0/255.255.252.0/0/0)
remote ident (addr/mask/prot/port): (10.20.0.0/255.255.0.0/0/0)
current_peer: 1.1.1.1
#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 46, #pkts decrypt: 46, #pkts verify: 46
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0
local crypto endpt.: 2.2.2.2, remote crypto endpt.: 1.1.1.1
path mtu 1500, ipsec overhead 74, media mtu 1500
current outbound spi: 0CA9CEC6
current inbound spi : 83DEBAD1
inbound esp sas:
spi: 0x83DEBAD1 (2212412113)
transform: esp-aes esp-sha-hmac no compression
in use settings ={L2L, Tunnel, PFS Group 2, }
slot: 0, conn_id: 7069696, crypto-map: outside_map
sa timing: remaining key lifetime (kB/sec): (4373996/28693)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00007FFF 0xFFFFFFFF
outbound esp sas:
spi: 0x0CA9CEC6 (212455110)
transform: esp-aes esp-sha-hmac no compression
in use settings ={L2L, Tunnel, PFS Group 2, }
slot: 0, conn_id: 7069696, crypto-map: outside_map
sa timing: remaining key lifetime (kB/sec): (4374000/28693)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001
crypto map outside_map 4 match address outside_4_cryptomap
crypto map outside_map 4 set pfs
crypto map outside_map 4 set peer 1.1.1.1
crypto map outside_map 4 set transform-set ESP-AES-128-SHA
