08-06-2014 07:40 AM - edited 02-21-2020 10:29 AM
I have read a couple things about it but needed to confirm if any of it is true regarding the setup I am using. The output is below: IP addresses have been changed.
DPF-Store3722#sh cry isa sa
IPv4 Crypto ISAKMP SA
dst src state conn-id status
1.1.1.1 2.2.2.2 QM_IDLE 2027 ACTIVE
3.3.3.3 1.1.1.1 QM_IDLE 2029 ACTIVE
2.2.2.2 1.1.1.1 QM_IDLE 2028 ACTIVE
The local Address from the Remote site is 1.1.1.1 and the 2 Hub locations are 2.2.2.2 and 3.3.3.3. Can anyone tell me why I see a third Phase 1 tunnel established with the same IP addresses but the source and destination is reversed?
Solved! Go to Solution.
09-09-2014 05:39 PM
Hi,
You can reach out to our Cisco Technical Assistance Center (TAC) for help with the issue you have reported. Please check if you have a Cisco contract such as SMARTnet or Cisco Software Application Support (SAS) Service is required to be able to be covered by TAC.
You can contact the Cisco Technical Assistance Center (TAC) in one of the following ways:
•Online: http://www.cisco.com/tac/
•E-mail: tac@cisco.com
•Phone: North America 800-553-2447 | Australia 1-800-805-227 | Europe 32-2-704-5555 | Asia-Pacific 61-2-8446-7411 | UK 0800-404-7778
Please see the following URL for other contact numbers:
http://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html
If you don't have a Cisco contract such as SMARTnet or Cisco Software Application Support (SAS) Service to be able to be covered by TAC, you can post your question to the Cisco Support Community website (https://supportforums.cisco.com/) and somebody will assist you with your questions.
I appreciate this opportunity to assist you and I do hope the information I sent you pointed you to the right direction.
Best regards,
"Nilz"
Nilo Noguera
.:|:.:|:. Specialist, Cisco Global Virtual Engineering - Cisco Partner Help
http://www.cisco.com/web/partners/tools/ph.html
08-29-2014 07:51 AM
Do you have the local device set to Originate Only or is it also set as a Responder? I am thinking that would be why you see the return SA.
Just a thought.
09-09-2014 05:39 PM
Hi,
You can reach out to our Cisco Technical Assistance Center (TAC) for help with the issue you have reported. Please check if you have a Cisco contract such as SMARTnet or Cisco Software Application Support (SAS) Service is required to be able to be covered by TAC.
You can contact the Cisco Technical Assistance Center (TAC) in one of the following ways:
•Online: http://www.cisco.com/tac/
•E-mail: tac@cisco.com
•Phone: North America 800-553-2447 | Australia 1-800-805-227 | Europe 32-2-704-5555 | Asia-Pacific 61-2-8446-7411 | UK 0800-404-7778
Please see the following URL for other contact numbers:
http://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html
If you don't have a Cisco contract such as SMARTnet or Cisco Software Application Support (SAS) Service to be able to be covered by TAC, you can post your question to the Cisco Support Community website (https://supportforums.cisco.com/) and somebody will assist you with your questions.
I appreciate this opportunity to assist you and I do hope the information I sent you pointed you to the right direction.
Best regards,
"Nilz"
Nilo Noguera
.:|:.:|:. Specialist, Cisco Global Virtual Engineering - Cisco Partner Help
http://www.cisco.com/web/partners/tools/ph.html
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: