In 7.x, the name of the tunnel group MUST be the IP address of the remote peer.
tunnel-group 172.16.10.10 type ipsec-l2l
You can provide any name you want for the group if it is type ipsec-ra, but for l2l, the name must be the IP address. I believe this is because the ASA borrows its VPN foundation from the VPN3k, where the rules are the same.
This is true unless you are using agressive mode IKE or certificates. Although even when I tried agressive mode it still fails to allow it. This seems like a step backwards. The PIX was able to do this.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...