I've deployed an ASAv (without a license yet) in my virtual network at Azure in order to test it to see if it will function how I expect it to when connecting IPsec VPNs (Azure tunnels don't support enough features). I was able to bring up an IKEv1 t...
Hey all, I have a router that I have configured ssh on with local aaa authentication enabled. I am prompted to login, but the login is prompting access denied. Curious as to why this was happening I enabled telnet to test as well. Using the same conf...
I figured out my issue after looking at debugs on the onsite ASA. It was a configuration issue on that ASA. I needed to tell my tunnel-group on the ASA onsite to use ikev2 with a policy. I'm guessing this is required in software release 9.1 because t...
I finally got the ikev2 debug to work. Please see the attached file. EDIT: It appears I still can't attach files. Please see below. IKEv2-PROTO-7: (423): SM Trace-> SA: I_SPI=0B09989D5CADF4B4 R_SPI=000 0000000000000 (I) MsgID = 00000000 CurState: IDL...
Here are the packet captures from the outside interface of the ASAv. I can also provide packet captures for the outside interface of the remote ASA if needed. Edit: I don't think the PCAP file is attaching, so if you can't see it here is the output o...
Logging into the router via SSH from the telnet session seems to have solved the issue. No reload was required. Thank you for the help and information.
