https://community.cisco.com/t5/network-security/l2l-vpn-with-palo-alto-firewall/m-p/3747744#M8899 <P>Attempting to establish tunnel to Palo Alto keep getting failure:</P> <P>&nbsp;</P> <P>&nbsp;Received encrypted packet with no matching SA, dropping</P> <P>&nbsp;</P> <P>My cisco crypto map entry:</P> <P>crypto map outside_map 115 match address outside_cryptomap_115<BR />crypto map outside_map 115 set peer 66.119.113.251<BR />crypto map outside_map 115 set ikev1 transform-set ESP-AES-256-SHA</P> <P>&nbsp;</P> <P>From Palto Alto:</P> <P>Encryption: aes-256-cbc</P> <P>DH Group:5</P> <P>Hours: 24</P> <P>Authenticaton: sha</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> <P><BR /><BR />&nbsp;</P> Fri, 21 Feb 2020 16:28:34 GMT bruce.thornton 2020-02-21T16:28:34Z https://community.cisco.com/t5/network-security/l2l-vpn-with-palo-alto-firewall/m-p/3747744#M8899 <P>Attempting to establish tunnel to Palo Alto keep getting failure:</P> <P>&nbsp;</P> <P>&nbsp;Received encrypted packet with no matching SA, dropping</P> <P>&nbsp;</P> <P>My cisco crypto map entry:</P> <P>crypto map outside_map 115 match address outside_cryptomap_115<BR />crypto map outside_map 115 set peer 66.119.113.251<BR />crypto map outside_map 115 set ikev1 transform-set ESP-AES-256-SHA</P> <P>&nbsp;</P> <P>From Palto Alto:</P> <P>Encryption: aes-256-cbc</P> <P>DH Group:5</P> <P>Hours: 24</P> <P>Authenticaton: sha</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> <P><BR /><BR />&nbsp;</P> Fri, 21 Feb 2020 16:28:34 GMT https://community.cisco.com/t5/network-security/l2l-vpn-with-palo-alto-firewall/m-p/3747744#M8899 bruce.thornton 2020-02-21T16:28:34Z