About Edward E.

Edward E. · 04-23-2020

Hello Community,I am experiencing a strange behavior with a Dynamic IPSEC VPN Tunnel between an ASA and a IOS router,Both ph1 and ph2 are successful. When I try to ping a local resource in either directions, packets go through the tunnel, decapsulate...

Edward E. · 04-24-2020

I added the command, I don't see the drops anymore in the logs, but there are no icmp replies either. sh crypto ipsec always shows 0 packets encrypted and all traffic (icmp and the other traffic that I generated) is being torn down in the ASA:Apr 24 ...

Edward E. · 04-24-2020

I generated traffic from the remote site to the ASA as you suggested and I still have the same issue, No packets are encrypted from ASA to IOS. The traffic doesn't even get routed to the correct VRF even though the routing is ok. I saw something unus...

Edward E. · 04-24-2020

After some debugging, I noticed that the icmp packets are filtered on the asa by an ACL:1: 08:05:02.358669 <remote_ios-ip> > <local_asa-ip>: icmp: echo request Drop-reason: (acl-drop) Flow is denied by configured rule2: 08:05:04.354214 <remote_ios-ip...

Edward E. · 04-23-2020

Actually that's the output on ASA, ICMP requests are received on the ASA but the replies are not sent to the router via the Tunnel. For information, I am pinging a local interface on the ASA from the router (no routing needed). This is the output on ...

Member Since	‎04-23-2020 08:21 AM
Date Last Visited	‎10-25-2020 11:44 AM
Posts	5

User Statistics

User Activity

Dynamic IPSEC VPN Tunnel does not encapsulate any packets

Re: Dynamic IPSEC VPN Tunnel does not encapsulate any packets

Re: Dynamic IPSEC VPN Tunnel does not encapsulate any packets

Re: Dynamic IPSEC VPN Tunnel does not encapsulate any packets

Re: Dynamic IPSEC VPN Tunnel does not encapsulate any packets