topic flow denied error in Network Security https://community.cisco.com/t5/network-security/flow-denied-error/m-p/1887312#M457798 <HTML><HEAD></HEAD><BODY><P>I think the packet-tracer tool generates a real packet, wich will need the sa to be established. </P><P>Your ipsec tunnel is not established, if you don´t have an ipsec sa. </P><P></P><P>What output does the monitor-log bring if you try to establish the tunnel?</P><P>Try debugging for more information: </P><P>debug crypto ipsec, dont forget the term moni. </P><P>The output from both sides should help you to find the mistake in the configuration. </P></BODY></HTML> Fri, 23 Mar 2012 14:04:34 GMT frederic_hohn 2012-03-23T14:04:34Z flow denied error https://community.cisco.com/t5/network-security/flow-denied-error/m-p/1887311#M457796 <P>Drop-reason: (acl-drop) Flow is denied by configured rule eeror on asa</P><P></P><P></P><P>When i run the packet tracer i am geeting above eeror</P><P></P><P></P><P>Phase 1 is up</P><P></P><P></P><P>But when i excute show crypto ipsec sa</P><P></P><P></P><P>i am not geeting any result</P><P></P><P></P><P>Please suggest</P><P></P><P></P><P>As check access-list, transformset from both side is matching</P><P></P><P></P><P>Put when ever i access the far end server Phase 1 is active but not able to access</P> Mon, 11 Mar 2019 22:46:14 GMT https://community.cisco.com/t5/network-security/flow-denied-error/m-p/1887311#M457796 prashantrecon 2019-03-11T22:46:14Z flow denied error https://community.cisco.com/t5/network-security/flow-denied-error/m-p/1887312#M457798 <HTML><HEAD></HEAD><BODY><P>I think the packet-tracer tool generates a real packet, wich will need the sa to be established. </P><P>Your ipsec tunnel is not established, if you don´t have an ipsec sa. </P><P></P><P>What output does the monitor-log bring if you try to establish the tunnel?</P><P>Try debugging for more information: </P><P>debug crypto ipsec, dont forget the term moni. </P><P>The output from both sides should help you to find the mistake in the configuration. </P></BODY></HTML> Fri, 23 Mar 2012 14:04:34 GMT https://community.cisco.com/t5/network-security/flow-denied-error/m-p/1887312#M457798 frederic_hohn 2012-03-23T14:04:34Z