The messages that you are getting mean that the security appliance has received a duplicate of a previous Phase 1 packet, and will transmit the last message. This message could indicate a network performance or connectivity issue where the peer is not receiving sent packets in a timely manner. You need to make sure that the remote peer ip address is correct and the pre-shared key is matching exactly the same on both sites. Also, make sure that there is not anything in the middle blocking isakmp (UDP 500). Please try to collect the following information:
Are you able to get the debugs from the remote site?
Please send the VPN configuration of both sites for this specific tunnel.
Do you have any other L2L tunnel active on the ASA?
Please let me know if both sites are directly connected to the Internet and also if they have static or dynamic IP address on the outside.
Please also try to take a “show crypto ikev1 sa” to see what message is the ASA waiting for.
You could also take a capture from peer to peer on the outside to check if there is bidirectional communication. For instance:
capture vpn interface (outside) match ip host (local peer) host (remote peer).
Then you initiate the VPN tunnel and collect the output with the command “show capture vpn”. You also import it into Wireshark to get more details.
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...