Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

Dynamic IPSec VPN btw Cisco ASA & Juniper Firewall !!!

Hi Guys,

I am trying to setup the Dynamic IPSec VPN tunnel btw Cisco ASA (having Dynamic IP Address) & Juniper Firewall (having Static IP Address)....

But, the tunnel is not coimung up & i am getting this logs on ASA, (Logs are attached as an attachment)

-------------------------------------------------------------------------------------------------------------

ASA(config)# sh crypto isakmp sa

3   IKE Peer: X.Y.Z.Z

    Type    : user            Role    : initiator
    Rekey   : no              State   : MM_WAIT_MSG2

ASA(config)#
------------------------------------------------------------------------------------------------------------

     

Any Idea please,

Regards,

Mubasher

1 REPLY
New Member

Re: Dynamic IPSec VPN btw Cisco ASA & Juniper Firewall !!!

HI,

The tunnel is showing MM_WAIT_MSG2 because it is waing for the peer devie to send proposals.

The packets from the peer device is not reaching ASA.

Try enabling NAT-T on both the devices

Regards,

Pradhuman

1283
Views
0
Helpful
1
Replies