we have a site to site VPN with a partner, we need to access three different hosts on the partner's network. The Phase 1 came but there is issue with phase 2 out of three hosts we can only connected with one host others are not connected and they all shared same parameters.
Below is show ip access list shown matched packet but connection to hosts were not successful
With show crypto ipsec sa I saw send error and i don't know what might be responsible for it.
Any body who might be wrong please help me out am exhausted.
10 permit ip host 220.127.116.11 host 18.104.22.168 (647594 matches) 20 permit ip host 22.214.171.124 host 126.96.36.199 (47794 matches) 30 permit ip host 188.8.131.52 host 184.108.40.206 (581720 matches)
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...