06-20-2024 09:04 AM - edited 06-20-2024 09:05 AM
Recently added a new l2l vpn tunnel for a new site and after building out and bringing up the tunnel, all connection profiles and crypto maps are now missing from the asdm > configuration > site-to-site vpn > connection profiles list and asdm > configuration > site-to-site vpn > crypto maps. If I try to recreate those profiles, I get an error msg saying the profile already exists. Lastly, now all the tunnel connections are down and we're unable to bring them back up.
Has anyone ever seen this happen before?
06-20-2024 09:09 AM
cany you see the config via CLI ?
MHM
06-20-2024 09:30 AM
I believe so,
All the following are present:
transform-sets
both ikev1 and v2 proposals
crypto maps
crypto ike policies
crypto ike1,2 are enabled and assigned to their respective interfaces as before
group-policies
tunnel-groups
We've reloaded the device in the hopes that maybe we're up against a bug but no luck. Info is still missing when viewing in ASDM.
06-20-2024 09:40 AM
Cisco Secure Firewall ASA Compatibility - Cisco
check then the compatibility between ASA and asdm
MHM
06-20-2024 09:45 AM - edited 06-20-2024 09:59 AM
Device: ASA5512
ASA Version: 9.12(4)67
ASDM Version: 7.18(1)152
Edit to add:
I picked one of the pre-existing tunnels and ran packet-tracer via cli, all phases pass with ALLOW result and the final result being:
Result:
input-interface: Inside
input-status: up
input-line-status: up
output-interface: Outside
output-status: up
output-line-status: up
Action: allow
06-20-2024 10:55 AM
Found the issue by doing a config compare from an older snapshot. For some reason the following command/line item was missing:
crypto map outside_map interface Outside
Once I reapplied the above command, all pre-existing connection profiles are now visible and all tunnels are now showing as up with traffic counters increasing.
06-20-2024 11:04 AM
That why I suggest check cli.
Glad issue is solved
Have a nice day
MHM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide