VPN site to site problem

[mohamed.ali]

Dears, 

when i make packet trace to the VPN site to site I see this problem 

Phase: 9
Type: VPN
Subtype: encrypt
Result: DROP
Config:
Additional Information:

Result:
input-interface: inside
input-status: up
input-line-status: up
output-interface: outside
output-status: up
output-line-status: up
Action: drop
Drop-reason: (acl-drop) Flow is denied by configured rule

[Rob Ingram]

Hi,

Could you provide more information please? What traffic src ip, dst ip and service is being dropped? Please provide the running-config

[mohamed.ali]

Dear,

can you send me a template for IKEV2 configuration?
to test it with my environment.
as well the NAT and if there is any additional configuration.


thanks

[Rob Ingram]

Here are some example configs:

https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/117337-config-asa-router-00.html

http://www.pearsonitcertification.com/articles/article.aspx?p=2140099&seqNum=7

https://integratingit.wordpress.com/2016/09/11/configuring-ikev2-site-to-site-vpn-on-cisco-asa/

https://www.networkstraining.com/configuring-site-to-site-ipsec-vpn-on-asa-using-ikev2/