About Svetoslav Chinkov

Svetoslav Chinkov · 06-07-2017

Hello All, I am new to security and need help figuring out the following issue. I have a site to site VPN. All remote subnets are reachable over the VPN except 192.168.0.0/24 - 401_Data when sourced from 192.168.9.0 GPS-Secure. I suspect the issue i...

Svetoslav Chinkov · 06-12-2017

Hi Francesco, Modifying both ends of the VPN tunnel with the mirrored crypto ACL worked. Thank You for helping me solve this issue.

Svetoslav Chinkov · 06-09-2017

Francesco, sorry I was not able to post sooner. Both firewalls are managed by me. I will try your suggestion on the weekend and see if that helps. The ASA versions are as follows: Local: ASA5520 - 9.1(6) Remote: ASA5515X - 9.7(1) Thanks

Svetoslav Chinkov · 06-08-2017

Yes, I did. The best I can tell they match - however I am not sure if ACL statements were enter in the configuration in the order they are displayed or if that is just how the device sorts out the output when the running config is displayed. Please f...

Svetoslav Chinkov · 06-08-2017

Francesco, once again thank you for your help. When I first started troubleshooting this issue I added a NAT statement similar to the one you suggested, however it did not help. Attached are the current modify configuration, the output of packet trac...

Svetoslav Chinkov · 06-07-2017

Thank You for your reply Francesco. I fat fingered the destination subnet in the packet tracer file above. Attached is the correct packet trace. I think the problem is identified in phase 4 (192.168.9.0/24 is dynamically NATed, instead of tunneled in...

Member Since	‎06-15-2013 10:46 PM
Date Last Visited	‎08-18-2017 04:01 AM
Posts	9

User Statistics

User Activity

VPN trafic does not hit cryptomap

Hi Francesco,

Francesco, sorry I was not

Yes, I did. The best I can

Francesco, once again thank

Thank You for your reply