02-22-2020 09:37 PM
In IPSec Tunnel phase 1 is up and phase 2 is not up then whats the issue of it. Thanks
02-23-2020 12:06 AM
Hello,
phase 2 usually means a problem with the IPSec SA parameters. Do you have a debug output, or better yet, the configs of both sides ?
02-23-2020 12:08 AM
Please check the phase two configurations. If you have similar properties configured in both the tunnel end point.
crypto ipsec configuration like hashing is same and if modes are same like tunnel and transport.
Make sure no deny of IP protocol number 50 and 51.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide