cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1702
Views
10
Helpful
7
Replies
Beginner

CSCue42170 - IKEv2 Support Multi Selector under the same child SA

HI,

 

We are seeing a similar issue with Strongswan and CISCO ASA 9.7(1)4. Can someone please confirm if this is bug effects 9.7(1)4?

 

Thanks

Prashanth

7 REPLIES 7
Beginner

Re: CSCue42170 - IKEv2 Support Multi Selector under the same child SA

I'm having the same issue with getting a Fortinet to connect to ASA.

 

If I protect 1 network then the VPN connects, but if I have multiple, it fails

Beginner

Re: CSCue42170 - IKEv2 Support Multi Selector under the same child SA

I got mine working, my issue ended up being a NAT configuration issue on the ASA side. Once I resolved the issue, the tunnel came up and stayed up

Beginner

Re: CSCue42170 - IKEv2 Support Multi Selector under the same child SA

Many thanks for that hint. In any circumstance, my ASA was using the same NAT-IP for two hosts. Very strange behaviour.

I'm using object NAT. The (right!) NAT object was used at the NAT section of the host.

But in the object overview i saw, that it was the IP of another NAT object. Creepy! :-)

 

 

Highlighted
Beginner

Re: CSCue42170 - IKEv2 Support Multi Selector under the same child SA

Make sure to create a NAT entry to NOT NAT any traffic from your "protected Network" to the remote Network. The order of the NAT entries is important also (that was my problem)

Beginner

Re: CSCue42170 - IKEv2 Support Multi Selector under the same child SA

Having exactly the same issue with Barracuda NG and ASA 9.7(1)15.

Can't understand, that Severity of this bug is "Enhancement".

Contributor

Re: CSCue42170 - IKEv2 Support Multi Selector under the same child SA

I have this problem also with Cisco IOS 15.4 on 800 series with strongswan as the remote end. 

Michael Please rate all helpful posts
Beginner

Re: CSCue42170 - IKEv2 Support Multi Selector under the same child SA

Same issue with version 9.4(4)18
CreatePlease to create content
Content for Community-Ad
August's Community Spotlight Awards