ASA 5505 Easy VPN Setup allows site B to access site A but not the other way around.

[junorefts]

Hello,

I have two ASA 5505 devices that were working great until our Comcast modem started having problems and Comcast replaced it with a new/different model.  Since then the EasyVPN server at Site A cannot access the network at Site B.  Site B can access site A without any issues.

What would be the best place to start diagnosing this?

Thank you

[Julio Carvajal]

Where was the change done?

On the side where the Easy VPN lives or on the client side?

What mode are you using? NEM?

Whenever you send traffic to the other side, do you see the crypto ipsec sa encrypting packets counters increasing? If yes do you see the decryption hits on the other side?

Regards,

Jcarvaja

[junorefts]

Hello,

my appologies for the late reply.  I have been working through this problem and trying to gather more information.

The change was made on the Easy VPN server side.  The client can get in but the devices on the Easy VPN side cannot communicate with the devices behind the client side.

NEM is not implemented.

How can I check these packets?

Thanks!