FMC/FTD VPN issue

[benolyndav]

Hi

Got x2 2100 FTD's managed by same FMC and got the VPN up between the two but oneside has no decaps any ideas, ? there is no NAT configured do I need it as some docs suggest because it was working before one FTD got replaced due to failure with no NAT?

Thanks

[Rob Ingram]

Hi @benolyndav sure, but if there is no interesting traffic and the IPSec SA expire, or the tunnel drops for any reason, reboot etc, you might find the wrong tunnel comes up first and you've the same problem again.

It might be better to use a route based VPN or not use overlapping networks, though that might be easier said than done.

[benolyndav]

Hi Rob
Good point I'll bare that in mind from now on 

Thanks