Hi, I have two ASA in US (inside network 10.0.0.0/24) and India. I am controlling US. I have created IPSEC peer-2-peer IPSEC tunnel.
On US side, I have allowed 10.0.0.0/24 as source of interesting traffic in Cryptomap ACL. On India side, tech has opened 10.80.0.0/26 as interesting traffic in Cryptomap ACL.
Now I am on US side having subnet 10.80.0.0 and trying to send data towards india, but Tunnel is no UP.
I am seeing error on US ASA "No SPI to identify Phase 2 SA"., please help.
Regards,
Rupesh