Hello, I have an ASA set up with an IPSec tunnel to another host site on our network. The ASA peers with a Fortinet device at our corporate office. The IPSEC tunnel is up and I can get traffic from the subnet 10.2.0.0/16 on the inside interface just ...
As of today, this working. There were a couple of issues that was causing this to fail. 1. The 10.10.7.0/24 site needed a static route to force traffic over a secondary link to the 192.168.8.96/32 host. 2. On the MPLS router that routes to the inside...
Hi Jon, Yeah, this is exactly my problem. My first time setting up an ASA with very miinimal Fortinet experience ;) Correction to the configuration above:"DATA CENTER" = 10.2.0.0/16This was my mistake when I made the reference key. In response to you...
Hi David, Thanks for the advice. I followed the steps you listed and it likes like the phase 2 is initiated by the ASA, but I am not seeing any errors as far as I can tell. And the packet tracer still shows it failing at the VPN phase. I have attache...
I don't have one configured, only the implicit permit from anywhere in the inside. Do I need to create one? It is my understanding that all traffic originated from the inside will be allowed.
Actually, that was a typo on my part. Sorry for the confusion.The actual names are different in the ASA. Some of the configuration was changed to protect internal information. The crypto map does match the ACL it is calling.
