Establish Site to Site IPSec tunnel between Cisco ASA 5520 and Cisco VPN 3030 Concentrator

[dpatkins]

All,

I am stuck.  We have configured a site to site tunnel from our ASA to another organizations Cisco 3030.  It appears to have just one way initiation.  We can do a ping to a device on the remote site and it will ping just fine.  however, when the tunnel needs to be initiated from the remote site, it will not work until we have initiated the tunnel and then everything works.

I continue to see Error processing payload: Payload ID: 1 errors on the ASDM logs.

It appears that all the configuration is in place because we can in fact establish the IPSec tunnel unidirectional.  And once established, traffic can flow bidirectional.

Any ideas?

Thank you

[Jennifer Halim]

Is there any device in between the ASA and Concentrator 3030 (whether it's in front of the ASA, or in front of the 3030) that is doing stateful firewall, whereby access is not allowed from remote towards your ASA?