Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Problems between Site-2-Site, two ASA

Hello,

i have big problems to configure the site to site tunnel between to ASA's (one ist ASA5510 the second one ASA5505)

After 8 hours work i dont have any result

show cryto nothing say, here my config file i hope any could help me

kind regards

Alen

1 ACCEPTED SOLUTION

Accepted Solutions

Problems between Site-2-Site, two ASA

No need to have the IKEv2 configuration on the tunnel group as you are using v1.

Now,

Do the following :

On FW GR

fixup protocol icmp

Then do 2 packets tracers and provide me the entire output of the second one done

packet-tracer input inside icmp 10.43.81.10 8 010.43.11.15

packet-tracer input inside icmp 10.43.81.10 8 0 10.43.11.15

On FW VIE

fixup protocol icmp

Then do 2 packets tracers and provide me the entire output of the second one done

packet-tracer input inside icmp 10.43.11.15 8 0 10.43.81.10

packet-tracer input inside icmp 10.43.11.15 8 0 10.43.81.10

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

Looking for some Networking Assistance? Contact me directly at jcarvaja@laguiadelnetworking.com I will fix your problem ASAP. Cheers, Julio Carvajal Segura http://laguiadelnetworking.com
1 REPLY

Problems between Site-2-Site, two ASA

No need to have the IKEv2 configuration on the tunnel group as you are using v1.

Now,

Do the following :

On FW GR

fixup protocol icmp

Then do 2 packets tracers and provide me the entire output of the second one done

packet-tracer input inside icmp 10.43.81.10 8 010.43.11.15

packet-tracer input inside icmp 10.43.81.10 8 0 10.43.11.15

On FW VIE

fixup protocol icmp

Then do 2 packets tracers and provide me the entire output of the second one done

packet-tracer input inside icmp 10.43.11.15 8 0 10.43.81.10

packet-tracer input inside icmp 10.43.11.15 8 0 10.43.81.10

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

Looking for some Networking Assistance? Contact me directly at jcarvaja@laguiadelnetworking.com I will fix your problem ASAP. Cheers, Julio Carvajal Segura http://laguiadelnetworking.com
151
Views
0
Helpful
1
Replies