cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
6232
Views
0
Helpful
3
Replies

Site to Site VPN Issue. Getting MM_WAIT_MSG4 in Phase 1

amit.rane
Level 1
Level 1

Hi All,

We have recenly configured site to site VPN tunnel between Mumbai & WDC, but traffic is not flowing through the tunnel. After executing "sh crypto isakmp sa" command on FW getting below msg.


6   IKE Peer: 66.151.98.66
    Type    : user            Role    : initiator
    Rekey   : no              State   : MM_WAIT_MSG4

debug crypto isakmp output is,

INTMUM1FW0002# Dec 02 02:18:47 [IKEv1]: IP = 66.151.98.66, Information Exchange processing failed

Dec 02 02:39:14 [IKEv1]: IP = 66.151.98.66, Information Exchange processing failed
Dec 02 02:39:31 [IKEv1]: IP = 66.151.98.66, Information Exchange processing failed

Mumbai End Network -- 10.91.65.0/28

WDC End Network -- 172.16.55.0/24

Peer IP on both end is abc123

What could be the issue? i have attached both end FW config.

Thanks in advance.

3 Replies 3

amit.rane
Level 1
Level 1

We are using ASA 5520 on both ends with IOS version 8
.3 (1)

Hi Amit,

Could you please post the output of "debug cry isa 127" from both the endpoints?

Cheers,

Prapanch

Issue had been resloved. There was a routing issue on ISP router
.