topic Re: Site To Site VPN in Network Security https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007590#M918808 <HTML><HEAD></HEAD><BODY><P>Here are the configs - I think you may be right about the names. My predecessor used the IP of the opposite device as the tunnel name so each was different. Let me know if there is anything else I may be missing here, and thank you!</P><P></P><P> </P><P></P></BODY></HTML> Fri, 06 Jun 2008 12:54:33 GMT adcorbett_2 2008-06-06T12:54:33Z Site To Site VPN https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007587#M918805 <P>Hello - I have a PIX 515 (v 7.2) and a ASA 5520. I have a VPN tunnel built between the 2 but I can not get them to connect. All I get are these messages:</P><P></P><P>Jun 06 08:43:13 [IKEv1]: IP = x.x.x.x, Error: Unable to remove PeerTblEntry</P><P>Jun 06 08:43:46 [IKEv1]: IP = x.x.x.x, Removing peer from peer table failed, no match!</P><P></P><P>I can ping x.x.x.x from within the 515.</P><P></P><P>The ASA is replacing a PIX 501. The tunnel between the 515 and the 501 works fine, just not with the ASA. I can post configs if needed. Any help would be great.</P><P></P> Mon, 11 Mar 2019 12:56:10 GMT https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007587#M918805 adcorbett_2 2019-03-11T12:56:10Z Re: Site To Site VPN https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007588#M918806 <HTML><HEAD></HEAD><BODY><P>Hi Andy</P><P> Please attach sanitized configs of both devices (515 and the config on ASA, not 501)</P><P> Most probably the tunnel-group statement is lost on ASA since it needs to have the tunnel-group name same as remote peer IP unlike old IOSes.</P><P></P><P>Regards</P></BODY></HTML> Fri, 06 Jun 2008 12:10:58 GMT https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007588#M918806 Alan Huseyin Kayahan 2008-06-06T12:10:58Z Re: Site To Site VPN https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007589#M918807 <HTML><HEAD></HEAD><BODY><P>hi,</P><P></P><P>Yes, please post the config of two equipments.</P><P></P><P>regards</P></BODY></HTML> Fri, 06 Jun 2008 12:11:29 GMT https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007589#M918807 Amadou TOURE 2008-06-06T12:11:29Z Re: Site To Site VPN https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007590#M918808 <HTML><HEAD></HEAD><BODY><P>Here are the configs - I think you may be right about the names. My predecessor used the IP of the opposite device as the tunnel name so each was different. Let me know if there is anything else I may be missing here, and thank you!</P><P></P><P> </P><P></P></BODY></HTML> Fri, 06 Jun 2008 12:54:33 GMT https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007590#M918808 adcorbett_2 2008-06-06T12:54:33Z Re: Site To Site VPN https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007591#M918809 <HTML><HEAD></HEAD><BODY><P>Hi </P><P>I want to ensure that you have the config below if not could you do it accordingly ?</P><P></P><P>Pix 515 </P><P>tunnel-group x.x.x.x type ipsec-l2l</P><P>tunnel-group x.x.x.x ipsec-attributes</P><P></P><P>where x.x.x.x is the IP of ASA peer</P><P></P><P>ASA </P><P>tunnel-group y.y.y.y type ipsec-l2l</P><P>tunnel-group y.y.y.y ipsec-attributes</P><P></P><P>where y.y.y.y is the IP of PIX peer</P></BODY></HTML> Fri, 06 Jun 2008 13:24:30 GMT https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007591#M918809 Amadou TOURE 2008-06-06T13:24:30Z Re: Site To Site VPN https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007592#M918810 <HTML><HEAD></HEAD><BODY><P>Yes that is correct - X is the IP of the ASA and Y is the IP of the PIX</P></BODY></HTML> Fri, 06 Jun 2008 13:30:06 GMT https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007592#M918810 adcorbett_2 2008-06-06T13:30:06Z Re: Site To Site VPN https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007593#M918811 <HTML><HEAD></HEAD><BODY><P></P><P>I didn't see on the ASA the command </P><P></P><P>crypto map peer1 interface outside</P></BODY></HTML> Fri, 06 Jun 2008 13:34:46 GMT https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007593#M918811 Amadou TOURE 2008-06-06T13:34:46Z Re: Site To Site VPN https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007594#M918812 <HTML><HEAD></HEAD><BODY><P>DOH! That was it. Whay is it always the easy stuff?</P><P></P><P>Thanks!</P></BODY></HTML> Fri, 06 Jun 2008 14:09:08 GMT https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007594#M918812 adcorbett_2 2008-06-06T14:09:08Z Re: Site To Site VPN https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007595#M918813 <HTML><HEAD></HEAD><BODY><P></P><P>I didn't see on the ASA the command </P><P></P><P>crypto map peer1 interface outside</P></BODY></HTML> Fri, 06 Jun 2008 14:10:17 GMT https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007595#M918813 Amadou TOURE 2008-06-06T14:10:17Z Re: Site To Site VPN https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007596#M918814 <HTML><HEAD></HEAD><BODY><P><span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P>yeah, in most case you need just a double-check, it's hard to be focused all time.</P></BODY></HTML> Fri, 06 Jun 2008 14:13:15 GMT https://community.cisco.com/t5/network-security/site-to-site-vpn/m-p/1007596#M918814 Amadou TOURE 2008-06-06T14:13:15Z