Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
The ipsec vpn tunnel is up, but it is unstable. There are 2 streams of interest. One of the streams of interest （10.200.0.0/16）can be connected. The other （172.19.0.0/16）fails. Sometimes the clear crypto ipsec sa is required to pass through, but afte...
The ASA have upgrade version to 9.6（4）5，but the problem still exists，This does not seem to be the reason for the systemciscoasa# show veciscoasa# show version Cisco Adaptive Security Appliance Software Version 9.6(4)5
when failed, I tried traceroute. After the packet arrived on the ASA, it did not seem to be encrypted. I did not find any packets on the peer device, but if I use the command “clear crypto ipsec sa”, I feel it all. The stream of interest can communic...
