topic Re: ASA to IOS problem in Network Security https://community.cisco.com/t5/network-security/asa-to-ios-problem/m-p/714303#M422147 <HTML><HEAD></HEAD><BODY><P>I think you will need to remove the private ip address from the match address and leave the natted ones only. Following links may help you</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094a87.shtml" target="_blank">http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094a87.shtml</A></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094634.shtml" target="_blank">http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094634.shtml</A></P></BODY></HTML> Tue, 05 Jun 2007 23:51:37 GMT sbilgi 2007-06-05T23:51:37Z ASA to IOS problem https://community.cisco.com/t5/network-security/asa-to-ios-problem/m-p/714302#M422145 <P>Hi all,</P><P></P><P>I am facing a problem trying to establish a tunnel with one of our supplier.</P><P></P><P>Their side is terminated on a IOS router currently unknown type and version (should be 12.2 - 12.4), my side is an ASA 7.2(2), configurations are attached (at least the snippet of the IOS config I was sent).</P><P></P><P>Apparently Phase 1 completes correctly but P2 fails with "Received non-routine Notify message: No proposal chosen (14)", I also attach debug from ASA with " debug crypto isakmp 129" and "debug crypto ipsec 129".</P><P></P><P>I double checked transform sets and IKE policies.</P><P></P><P>BTW I never had to use static NAT AND IPSec as here (I was asked to do so by other side) , is that configuration really feasible?</P><P></P><P>Many thanx in advance...</P><P></P><P>Ivano</P><P></P><P> </P><P></P> Fri, 21 Feb 2020 09:32:52 GMT https://community.cisco.com/t5/network-security/asa-to-ios-problem/m-p/714302#M422145 isautospa 2020-02-21T09:32:52Z Re: ASA to IOS problem https://community.cisco.com/t5/network-security/asa-to-ios-problem/m-p/714303#M422147 <HTML><HEAD></HEAD><BODY><P>I think you will need to remove the private ip address from the match address and leave the natted ones only. Following links may help you</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094a87.shtml" target="_blank">http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094a87.shtml</A></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094634.shtml" target="_blank">http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094634.shtml</A></P></BODY></HTML> Tue, 05 Jun 2007 23:51:37 GMT https://community.cisco.com/t5/network-security/asa-to-ios-problem/m-p/714303#M422147 sbilgi 2007-06-05T23:51:37Z