Hi,This means that your phase 1 and 2 are configured and you are receving the packets but your side is not sending any packet. Please do following:1. Check your NAT rule if you are NATing remote host. Use sh conn, sh xlate command to check local host...

Hi,The site where the decaps are showing 0, check the NAT applied. Is the remote host NATed? If yes than check that NAT configuration.Also from the same firewall where decaps are 0, check the routing back to the host. This migh be due to asymetric ro...

Hi,MM_WAIT_MSG6 is possible in case of PSK mismatch. It is the state of the initiator when PSK is not same on both receiver and initiator. Please do this on both firewalls:no tunnel-group xxxxxxx ipsec-attributesand then reconfigure tunnel-group ipse...