Local4.Notice 210.0.0.100 %ASA-5-713904: IP = 83.104.158.217, Received encrypted packet with no matching SA, dropping
means excrypted packet without a matching SPI arrived and was dropped
Local4.Notice 210.0.0.100 %ASA-5-713257: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 1 Cfg'd: Group 2
The error means that group setting for Diffie-Hellman on both sides mismatched.
In parctice it mean that we did not negotiaite phase 1 settings:
in your config
---------
crypto isakmp policy 70
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
---------
---------
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
---------
please note that phase 1 completes....
Local4.Notice 210.0.0.100 %ASA-5-713119: Group = 83.104.158.217, IP = 83.104.158.217, PHASE 1 COMPLETED
-------------
access-list outside_80_cryptomap_1 extended permit ip Thetford_LAN 255.255.255.0 Sudbury_LAN 255.255.255.0
crypto map outside_map 80 match address outside_80_cryptomap_1
crypto map outside_map 80 set pfs
crypto map outside_map 80 set peer 83.217
crypto map outside_map 80 set transform-set ESP-3DES-SHA
crypto map outside_map 80 set reverse-route
-------------
while the other side
-------------
access-list 104 remark IPSec Rule
access-list 104 permit ip 192.168.1.0 0.0.0.255 210.0.0.0 0.0.0.255
crypto map SDM_CMAP_1 1 ipsec-isakmp
description Tunnel to217.46
set peer 217.46
set transform-set ESP-3DES-SHA1
set pfs group2
match address 104
reverse-route
------------
Setting seems to match ... we'd need more debugs ... if the tunnel fails to establish .... or maybe see if NAT traversal is initialised ...
