About ankitbadani

ankitbadani · 09-21-2020

I have created an IPSec tunnel between Cisco ASA 5520 in DC and Aruba Virtual Gateway in AWS. NAT-T is enabled on both sides. The tunnel is up. Cisco local network in 192.168.254.0/28 which is the Gig0/1 interface. Aruba network is 172.28.1.0/24. I c...

ankitbadani · 09-23-2020

I was able to resolve the issue by allowing interesting traffic through the access-list applied on the outside interface.

ankitbadani · 09-22-2020

@Rob IngramDo we need access-group on the outside interface?

ankitbadani · 09-22-2020

I was able to piece together some information from the logs I had. CM-ASA# show crypto ikev1 saIKEv1 SAs:Active SA: 1Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)Total IKE SA: 11 IKE Peer: x.x.x.xType : L2L Role : responderR...

ankitbadani · 09-22-2020

I hadn't checked the "show route" output. I am going to simulate it in packet-tracer now.

ankitbadani · 09-22-2020

@Rob IngramI had to roll back the changes I made last night due to other reasons. So I cannot share the show results. But during the configuration, "show crypto ikev1 sa" had 1 active tunnel. "show crypto ipsec sa peer x.x.x.x" had correct transform ...

Member Since	‎03-27-2019 12:56 AM
Date Last Visited	‎09-25-2020 12:05 AM
Posts	6

User Statistics

User Activity

Site-to-Site VPN in Cisco ASA 5520 ver 9.1

Re: Site-to-Site VPN in Cisco ASA 5520 ver 9.1

Re: Site-to-Site VPN in Cisco ASA 5520 ver 9.1

Re: Site-to-Site VPN in Cisco ASA 5520 ver 9.1

Re: Site-to-Site VPN in Cisco ASA 5520 ver 9.1

Re: Site-to-Site VPN in Cisco ASA 5520 ver 9.1