topic Re: There are no IKEv1 SAs in Network Security

There are no IKEv1 SAs

Amardeep Kumar — Sun, 14 Apr 2019 21:19:00 GMT

Configured IP sec but when this Comamnd sh isakmp sa get the output

There are no IKEv1 SAs

sh run

access-list outside_cryptomap extended permit ip 172.16.8.0 255.255.248.0 object NETWORK_OBJ_192.168.12.0_22

nat (inside,outside) source static NETWORK_OBJ_172.16.8.0_21 NETWORK_OBJ_172.16.8.0_21 destination static NETWORK_OBJ_192.168.12.0_22 NETWORK_OBJ_192.168.12.0_22 no-proxy-arp route-lookup

crypto map outside_map 1 match address outside_cryptomap
crypto map outside_map 1 set pfs
crypto map outside_map 1 set peer 1.1.1.1
crypto map outside_map 1 set ikev1 transform-set USA

I I create Tunnel with ASA 1 to ASA 2 ASA 3 ASA 4 it is working but when I do with ASA 1 and ASA 5. not showing any thing.

ASA 5 to asa 2 , asa 3 asa 4 p2p are also working.

Is there any thing what is related to Switch ?

thanks

amardeep

Re: There are no IKEv1 SAs

Dennis Mink — Sun, 14 Apr 2019 23:34:52 GMT

Can you add icmp to the acl as well so you canbring the tunnel up using ping. Alsocan you debug isakmp and ipsec and see what it does. Append to post please

Re: There are no IKEv1 SAs

Amardeep Kumar — Mon, 15 Apr 2019 09:04:08 GMT

Thank You

debug isakmp and ipsec

shows nothing about p2p.

I have Wfilter placed behind both ASA. Is that making any difference . Btw i have removed one of wfilter from network to check but no luck.

Thanks

amardeep

Re: There are no IKEv1 SAs

Dennis Mink — Mon, 15 Apr 2019 10:03:28 GMT

What does the debug show? Are you seeing ike negotiation being responded by the far end at all?

Re: There are no IKEv1 SAs

Amardeep Kumar — Mon, 15 Apr 2019 10:38:29 GMT

I dont see any negotiations from any end.

no result from debug command.

Thanks

amardeep

Re: There are no IKEv1 SAs

Amardeep Kumar — Tue, 16 Apr 2019 09:26:37 GMT

Hello,

I would like to give more details on my problem.

I have two buildings - B1 and B2. both building Connected through ISP P2P Fiber..

WE are using HP Switch to make this connection.

On B1 Switch there are a Route defined.

ip route 172.16.8.0 255.255.248.0 192.168.8.69

Same Route also configured on Firewall too.

When I removed both of the Routes Tunnel get activated but there was no traffic follow.

I put the routes again and Tunnel went down.

But After that I removed Routes from both but Tunnel not showing as Active. I tried everything.

Please suggest.

Thanks

amardeep