Thanks for your quick reply, I tried to reboot the Cisco RV042 and the ASA as well but this is the same result: when I click on the Connect button the Tunnel seems to be UP on the ASA side but the IPsec phase 2 is not completed.
I sometimes get this error message on the ASA but not everytime when I'm trying to established the tunnel : 1 Nov 01 2014 18:10:15 Group = 22.214.171.124, IP = 126.96.36.199, construct_ipsec_delete(): No SPI to identify Phase 2 SA!
We are trying to build a tunnel from our local LAN to a remote site LAN as shown below :
ASA 5510 RV042
Local LAN : 188.8.131.52 >>>>> Local LAN : 192.168.1.0
The RV042 WAN interface has been setup on PPPOE mode, it is directly connected to an ADSL modem which has been put on bridge mode.
I know that our local LAN subnet is quite unusual but this was configured like this for years and we already built IPsec tunnels without any problems.
I tried to modify several times both security settings on the ASA and RV042 sides, choosing from basic settings to more complex, the best result I get was the tunnel up on the ASA side (Phase 1 only) and still "waiting for connection" status on the RV042.
Do I have to look on NAT rules on the ASA side? The RV042 has very limited options, I just added firewall rules to authorize traffic from 184.108.40.206 255.255.255.0 to 192.168.1.0 255.255.255.0.
Do I also need to set up IP forwarding for the IPsec tunnel ports on the RV042? I assume that I don't have to do it as the VPN passthrough is enabled on the device.
From what you have provided the configuration looks good. Though adding "I just added firewall rules to authorize traffic from 220.127.116.11 255.255.255.0 to 192.168.1.0 255.255.255.0." Should not be needed as the Gateway to Gateway configuration puts that in for you, though normally you can't see it as an actual rule.
As I am not as familiar with the ASA as I like to be the set up looks good. If needed you may want to open a case with Cisco TAC to have them look at the ASA.
One thing that I would try though is try changing the SA Phase 2 lifetime to a lower value for both the ASA and the RV042. I seem to have had issues with the tunnel negotiating when the SA Lifte time value is set at 28800. Try with 3600 (default value) and see if that will work.
Configure DHCP WAN Settings on the RV34x Router
A Wide Area Network (WAN) is a network that covers a broad area. A user or network of users can connect to the Internet through an Internet Service Provider (ISP) who offer...
Configure Static IP WAN Settings on the RV34x Router
A Wide Area Network (WAN) is a network that covers a broad area. A user or network of users can connect to the Internet through an Internet Service Provider (ISP) who ...