topic Re: IKEv2 Site to Site VPN having ERROR: Maximum transmissions reached in Network Security

IKEv2 Site to Site VPN having ERROR: Maximum transmissions reached

Prashobcv93 — Tue, 21 Sep 2021 14:16:32 GMT

Configured a new VPN from ASAV to Sonicwall.

VPN Phase 1 is not coming up with an Error as the Maximum number of transmissions reached.

Re: IKEv2 Site to Site VPN having ERROR: Maximum transmissions reached

Prashobcv93 — Tue, 21 Sep 2021 14:18:39 GMT

Phase 1 in ASA:

crypto ikev2 policy 5
encryption aes-256
integrity sha256
group 14 5
prf sha256
lifetime seconds 86400

Phase 2 in ASA:

match address SME_StephenChambers&CoSolicitor-HQ_Cryptomap
set pfs group14
set peer 89.242.3.146
set ikev2 ipsec-proposal AES-256-SHA-256
set security-association lifetime seconds 3600
set reverse-route

Re: IKEv2 Site to Site VPN having ERROR: Maximum transmissions reached

Prashobcv93 — Tue, 21 Sep 2021 14:19:57 GMT

SonicWall config attached.

Re: IKEv2 Site to Site VPN having ERROR: Maximum transmissions reached

Prashobcv93 — Tue, 21 Sep 2021 14:22:38 GMT

Debug logs attached

Re: IKEv2 Site to Site VPN having ERROR: Maximum transmissions reached

Rob Ingram — Tue, 21 Sep 2021 14:51:31 GMT

@Prashobcv93 try changing the Peer IKE ID on the Sonicwall (located in the General tab) to the private IP address of the ASA - 10.45.56.110

Re: IKEv2 Site to Site VPN having ERROR: Maximum transmissions reached

Prashobcv93 — Tue, 21 Sep 2021 14:54:25 GMT

Tried both but no luck.

Re: IKEv2 Site to Site VPN having ERROR: Maximum transmissions reached

Rob Ingram — Tue, 21 Sep 2021 14:58:37 GMT

@Prashobcv93 please provide the full ASA config

Re: IKEv2 Site to Site VPN having ERROR: Maximum transmissions reached

Prashobcv93 — Tue, 21 Sep 2021 15:02:40 GMT

ASAV config attached.

Re: IKEv2 Site to Site VPN having ERROR: Maximum transmissions reached

Rob Ingram — Tue, 21 Sep 2021 15:16:51 GMT

@Prashobcv93 The ASA is behind NAT but is the Sonicwall also?

Please turn on IKEv2 debugs on the ASA, attempt to establish the VPN tunnel and provide the debugs for review.

Re: IKEv2 Site to Site VPN having ERROR: Maximum transmissions reached

Prashobcv93 — Tue, 21 Sep 2021 15:45:22 GMT

Customer end device setting needs to be applied after a reboot and their firmware is outdated.

Awaiting device reboot and firmware upgrade.

Re: IKEv2 Site to Site VPN having ERROR: Maximum transmissions reached

Prashobcv93 — Tue, 21 Sep 2021 17:48:40 GMT

I am awaiting some time after the UK business hours to enable the debug.
I have the logs from the Sonicwall firewall (attached).

Re: IKEv2 Site to Site VPN having ERROR: Maximum transmissions reached

Prashobcv93 — Thu, 23 Sep 2021 10:32:00 GMT

Customer Sonicwall was out of date and was asking for a reboot for any new changes to apply.

The VPN profile in Sonicwall was flushed and recreated, and the VPN came up instantly.

Thanks for your help, @Rob Ingram