Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

troubleshooting branch ASA remote rechablility to main ASA

hi all ,

i have

192.168.2.0./24lan1--------asa1--------inteernet--------asa2------lan2192.168.0.0/24

vpn ikev1 is up

and lan1 can see lan2

======================

im sure that i put the remnote lan  of asa1 to "any"

but only the traffic to lan2 is being go fine without problems ???!!!

here is a packet tracer

test1 :

when i request 8.8.8.8 i have :

http://www11.0zz0.com/2014/03/06/09/768535004.png

http://www11.0zz0.com/2014/03/06/09/768535004.png

===============================================

wheni request lan2 ip

i have successful :

http://www6.0zz0.com/2014/03/06/09/724402845.png

http://www6.0zz0.com/2014/03/06/09/724402845.png

================================================

i dont know why !!

im sure than i putt the remote subnet to "any" at the asa1 !!

here is wt i mean

http://www12.0zz0.com/2014/03/06/09/177945307.png

http://www12.0zz0.com/2014/03/06/09/177945307.png

==============================================

AGIAN , vpn is ok when i reach the remote side , but i cant reach asa2 if i requested something like 8.8.8.8

why ?

regards

3 REPLIES
New Member

troubleshooting branch ASA remote rechablility to main ASA

i founbd that from the cli that the local is 192.168.2.0/24 !!!!

i dont know how that happedn im sure that i changed it by  asdm ?!!

i did

show crypto ipsec rsa sa

i didntr see 0.0.0.0/0.0.0.0

!!

stange issue

New Member

Re: troubleshooting branch ASA remote rechablility to main ASA

i thunk that my problem is here

:

http://www12.0zz0.com/2014/03/06/11/775856466.png

http://www12.0zz0.com/2014/03/06/11/775856466.png

i think i ned to change the

remote idnet  to 0.0.0.0/0.0.0.0

how do it from cli ???

New Member

Re: troubleshooting branch ASA remote rechablility to main ASA

any help ?

62
Views
0
Helpful
3
Replies
CreatePlease login to create content