About Olddddddd

Olddddddd · 04-24-2017

Hi guys, I setted up a S2S VPN between an ASA and Azure, but when I run the command : "show crypto ikev1 sa" it returns me "There are no ikev1 sa", and when I try to ping Google DNS to test the connectivity with Internet, it doesn't work. All pings ...

Olddddddd · 04-26-2017

I have added the nat command under the object group onPremNetwork, and like that, the tunnel seems to work. The "show crypto ikev1 sa" command tells me that the tunnel is active now, but I still can't access to the azure Network. Also, do I need to k...

Olddddddd · 04-26-2017

show crypto ipsec sa peer 52.178.X.X peer address: 52.178.X.X Crypto map tag: s2s-crypto-map, seq num: 1, local addr: 84.199.X.X access-list s2s-vpn-acl extended permit ip 172.18.64.0 255.255.255.0 10.0.0.0 255.255.0.0 local ident (add...

Olddddddd · 04-26-2017

packet-tracer input inside icmp 172.18.64.2 8 0 10.0.1.4 detailed Phase: 1Type: UN-NATSubtype: staticResult: ALLOWConfig:nat (inside,outside) source static onPremNetwork onPremNetwork destination static azureNetwork azureNetworkAdditional Informatio...

Olddddddd · 04-25-2017

Got it, I will try this tomorrow, thanks.

Olddddddd · 04-25-2017

Like that: packet-tracer input inside icmp 172.18.64.2 8 0 10.0.1.4 ?

Member Since	‎04-23-2017 06:35 AM
Date Last Visited	‎08-18-2017 03:54 AM
Posts	10

User Statistics

User Activity

"There are no ikev1 sa"

packet-tracer input inside

show crypto ipsec sa peer 52

There is the outputs:

Got it, I will try this

Like that: packet-tracer