topic Re: ASA L2L session is normal ?? in Network Security

ASA L2L session is normal ??

JustTakeTheFirstStep — Fri, 21 Feb 2020 17:16:51 GMT

If you look at the L2L VPN Session, you will see nothing in the session list.

The configuration

one ASA5525 (headquarters) and two ASA5516 (branch offices) are connected
5525's outside IP is connected to Dynamic.

I attach running-config.

Help me plz!!!

Re: ASA L2L session is normal ??

balaji.bandi — Fri, 05 Jul 2019 15:39:17 GMT

Quick look done - I believe you do not have any setup for IKEv2 sessions configured.

Do you see any issues around ? or is this just for clarification ?

Re: ASA L2L session is normal ??

JustTakeTheFirstStep — Fri, 05 Jul 2019 15:53:07 GMT

Hi. balaji.bandi.

Have you see the config I attached?

I had set up IKEv2 and had no problems so far.

I still think it's okay, but I think the VPN session is probably off for a while.

I think we need to generate L2L traffic.

However, as a remote user I do not know how to generate L2L traffic.

Re: ASA L2L session is normal ??

balaji.bandi — Fri, 05 Jul 2019 16:15:09 GMT

if the no interesting traffic passing between that VPN - make sense it was down. - to check you can ping other side device from your allowed ACL list to see other side any decryption take place.

Thank you, may be missed that attachment, let me review and comment back.

Re: ASA L2L session is normal ??

JustTakeTheFirstStep — Mon, 15 Jul 2019 08:58:38 GMT

The reason was simple.

L2L traffic must occur between Inside and Inside to establish a session.

I now realize that there is a timeout in the L2L session.