Site to site Ipsec not working at all

[Eduardo Marin]

Hi,

I have this situation:

I configure a basic Site to Site IPsec VPN in my lab (it worked), and after that I moved one of the ASAs to a remote end. Now the two ASAs are communicating trough a Layer 3 MPLS link (not important, I think), but I can´t do the tunnel works.

I have connectivity between the firewalls, even between pcs connected to the Firewalls with static NAT.

No isakmp associations, or ipsec as.

The only message I have from the remote ASA  is this:

Ignoring msg to mark SA with specified coordinates < DRVPN, 10> dead

Any help will be appreciated.

Regards

.

[andrew.prince]

Post your config for review.

[Eduardo Marin]

Thanks Andrew, but I figured it out what was happening: I configured a dynamic NAT in the remote end before the MPLS connection were ready. Without that, all is working. Now, I´m only need and access list in order to separate the traffics.

Regards, and thanks again