About tharbkrakens

tharbkrakens · 05-17-2024

We have been trying to configure a test Cisco ISR 4331 router to establish an IKEv2 tunnel for VPN traffic to a Cisco ASA firewall hosted by our VPN provider. Currently when the ASA initiates the tunnel with traffic, it establishes and stays up unti...

tharbkrakens · 05-23-2024

OK, the tunnel is establishing and stable now. Simple mistake on my end after the last change was the reason the tunnel wasn't initiating, pinging from a device connected to two private networks, it was sending the traffic over the network that alre...

tharbkrakens · 05-22-2024

I added the following configuration:ip access-list extended NONAT-TUNNELdeny ip 10.245.167.0 0.0.0.255 172.24.16.0 0.0.3.255deny ip 10.245.167.0 0.0.0.255 172.24.32.0 0.0.3.255permit ip 10.245.167.0 0.0.0.255 anyroute-map NONAT permit 10 match ip add...

tharbkrakens · 05-21-2024

Here are the relevant portions of the ASA and ISR configs.

tharbkrakens · 05-21-2024

Sorry for the delay in response, I was working with the ASA host to remove an extraneous proposal and set the integrity to null, I wanted to verify those changes would not resolve issue before updating the ticket here. Would implementing a crypto ma...

tharbkrakens · 05-20-2024

The ISR code is included with my original post, I've included the relevant sanitized code from the ASA with this response.I have run the debugs, the logs show that the tunnel is established and is encrypting data between the ISR and ASA, unfortunatel...

Member Since	‎05-17-2024 12:41 PM
Date Last Visited	‎06-06-2024 03:00 PM
Posts	8

User Statistics

User Activity

ISR4331 traffic to ASA cause IKEv2 tunnel failure

Re: ISR4331 traffic to ASA cause IKEv2 tunnel failure

Re: ISR4331 traffic to ASA cause IKEv2 tunnel failure

Re: ISR4331 traffic to ASA cause IKEv2 tunnel failure

Re: ISR4331 traffic to ASA cause IKEv2 tunnel failure

Re: ISR4331 traffic to ASA cause IKEv2 tunnel failure