There are no ikev1 sas

[Amardeep Kumar]

Hello, 

I would like to give more details on my problem. 

I have two buildings - B1 and B2. both building Connected through ISP P2P Fiber..

WE are using HP Switch to make this connection. 

On B1 Switch there are a Route defined. 

ip route 172.16.8.0 255.255.248.0 192.168.8.69

Same Route also configured on Firewall too. 

When I removed both of the Routes Tunnel get activated but there was no traffic flow. 

I put the routes again and Tunnel went down. 

But After that I removed Routes from both but Tunnel not showing as Active. I tried everything. 

Please suggest.

Thanks

amardeep 

[Dennis Mink]

What cisco product are you using? Can tou send configs and state from where to where you are protecting traffic.

[Amardeep Kumar]

Hi 

Cisco ASA 5515  ( ASA !) 

access-list outside_cryptomap_1 extended permit ip object internal_net object-group H-6-Floors

 nat (inside,outside) source static internal_net internal_net destination static H-6-Floors H-6-Floors no-proxy-arp route-lookup

route inside 172.16.0.0 255.255.0.0 192.168.14.150 1    ( Remote Subnet B Series ) 

crypto map outside_map 2 match address outside_cryptomap_1
crypto map outside_map 2 set pfs
crypto map outside_map 2 set peer x.x.x.x
crypto map outside_map 2 set ikev1 transform-set IPSeC-USA

cisco ASA 5515 

access-list outside_cryptomap extended permit ip 172.16.8.0 255.255.248.0 object-group A-186

nat (inside,outside) source static NETWORK_OBJ_172.16.8.0_21 NETWORK_OBJ_172.16.8.0_21 destination static A-186 A-186 no-proxy-arp route-lookup

route inside 172.16.0.0 255.255.248.0 172.16.8.2 1   ( ASA 2 Subnet  )
route inside 172.16.16.0 255.255.248.0 172.16.8.2 1 ( ASa 2 Subnet )
route inside 192.168.8.0 255.255.248.0 172.16.8.2 1    (  ASA 1 Subnet )

crypto map outside_map 1 match address outside_cryptomap
crypto map outside_map 1 set pfs
crypto map outside_map 1 set peer 2.2.2.2
crypto map outside_map 1 set ikev1 transform-set USA

Switch Setting with Fiber behind ASA 1 

ip route 172.16.16.0 255.255.248.0 192.168.8.69
ip route 172.16.8.0 255.255.248.0 192.168.8.69

When I remove this Route 

ip route 172.16.16.0 255.255.248.0 192.168.8.69  ( From Switch ) 

ip route 172.16.16.0 255.255.248.0 192.168.8.69  ( From Firewall

Tunnel Active first time.  but there was no Traffic Flow. 

I deleted Tunnel 2 -3 times to check and reconfigured it was activted after removing Routes above. But now I have remove routes too and Tunnel is not Active. 

Thanks

Amardeep 

[Amardeep Kumar]

Problem Resolved 

1. Traffic was not going to Firewall due to same routes configured on Switch ( for P2P Fiber Link). Removed routes from both end switches. and it started working. 

thanks

Amardeep