VPN L2L phase 2 problem

[omar.elmohri]

Please what can be the reason of this error message:

%PIX|ASA-3-713119: PHASE 1 COMPLETED

%PIX|ASA-5-713050: Connection terminated for peer IP_address. Reason: termination reason Remote Proxy IP_address, Local Proxy IP_address

This message indicates the termination of an IPSec tunnel.

%PIX|ASA-7-713900:Descriptive_event_string.

%PIX|ASA-3-713902 descriptive_event_string

Best regards,

[Jon Marshall]

Omar

It sounds like you may have a mismatch in your crypto access-lists. Could you possibly post the relevant bits of information from each device.

If not check that your crypto-map access-list on each device is a mirror image eg.

If you had this on the Pix

access-list vpntraffic permit ip 192.168.5.0 255.255.255.0 172.16.5.0 255.255.255.0

then on the ASA you would need

access-list vpntraffic permit ip 172.16.5.0 255.255.255.0 192.168.5.0 255.255.255.0

Jon