Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

VPN L2L phase 2 problem

Please what can be the reason of this error message:

%PIX|ASA-3-713119: PHASE 1 COMPLETED

%PIX|ASA-5-713050: Connection terminated for peer IP_address. Reason: termination reason Remote Proxy IP_address, Local Proxy IP_address

This message indicates the termination of an IPSec tunnel.

%PIX|ASA-7-713900:Descriptive_event_string.

%PIX|ASA-3-713902 descriptive_event_string

Best regards,

1 REPLY
Hall of Fame Super Blue

Re: VPN L2L phase 2 problem

Omar

It sounds like you may have a mismatch in your crypto access-lists. Could you possibly post the relevant bits of information from each device.

If not check that your crypto-map access-list on each device is a mirror image eg.

If you had this on the Pix

access-list vpntraffic permit ip 192.168.5.0 255.255.255.0 172.16.5.0 255.255.255.0

then on the ASA you would need

access-list vpntraffic permit ip 172.16.5.0 255.255.255.0 192.168.5.0 255.255.255.0

Jon

729
Views
0
Helpful
1
Replies
CreatePlease to create content