About JFGamez

JFGamez · 04-22-2020

Hello, Im trying to make a IPSec Site to Site tunnel between a Firepower 2100 running ASA Software and a Firepower 1010 running Firepower Device Manager (FDM) The tunnel dont go up and stuck on Phase 2 with the next error: Removing peer from correlat...

JFGamez · 04-23-2020

Hi,The PFS is configured in both sides with PFS group 5.In the FDM of Cisco 1010 i dont see the option for configure the device for originate the tunnel so i think that he can only answer..The debug of ASA is the next:ciscoasa(config)# debug crypto i...

JFGamez · 04-22-2020

I also define NAT exemption and it doesn't work.For any reason this two devices dont match in one configuration and i dont see in which configuration have mistakes, with other devices works perfectly.

JFGamez · 04-22-2020

Hi,I deleted the routers on both devices:ciscoasa(config)# show crypto isakmp saThere are no IKEv1 SAsThere are no IKEv2 SAsciscoasa(config)# show crypto ipsec saThere are no ipsec sasciscoasa(config)# Apr 22 11:21:05 [IKEv1 DEBUG]Deleted dynamic acc...

JFGamez · 04-22-2020

I added the PFS command and not works. I attach both CFG.

JFGamez · 04-22-2020

Sorry the correct IKEv1 policy of 1010 is:crypto ikev1 policy 2authentication pre-shareencryption deshash shagroup 5lifetime 86400I will try add the both cfgs.

Member Since	‎06-29-2018 03:58 AM
Date Last Visited	‎05-01-2020 12:02 AM
Posts	6

User Statistics

User Activity

IPSec problem Firepower 2100 (ASA) and Firepower 1010 (FDM)

Re: IPSec problem Firepower 2100 (ASA) and Firepower 1010 (FDM)

Re: IPSec problem Firepower 2100 (ASA) and Firepower 1010 (FDM)

Re: IPSec problem Firepower 2100 (ASA) and Firepower 1010 (FDM)

Re: IPSec problem Firepower 2100 (ASA) and Firepower 1010 (FDM)

Re: IPSec problem Firepower 2100 (ASA) and Firepower 1010 (FDM)