Hello,
I'm meeting an IPSec VPN issue that IPSec VPN with IKEv1 could not be established with the peers in several IOS versions of my ASA 5525-X.
Here are the details of my situation:
Device: ASA 5525-X
IOS: 9.2.4, IPSec VPNs work fine in this IOS version.
9.4.2, IPSec VPNs have been working fine in this IOS version for the past 8 months, but in last week all VPNs could not be established with the peers and they were all stuck at MM_WAIT_MSG2 of initiator or MM_WAIT_MSG3 of responder. No matter I clear the SAs of restart the ASA, it didn't work. Then I downgraded the IOS version to 9.2.4 and all VPNs are working fine now.
9.6.2, according to the situations above, I upgraded the IOS to 9.6.2 in last week and in the first 10 hours after the upgrade, the VPNs worked fine, but next all happened to be like the situation in IOS version 9.4.2.
All VPN parameters are configured well and exactly right. Network to the peers side is working fine.
The reason why I upgraded ASA IOS to 9.4.2 is that I need the PBR feature in it.
Could anyone please HELP on this? Thanks!
