site to site VPN tunnel between cisco ASA and juniper netscreen

[bala020881]

I'm facing some strange problem in brining up the phase 2 between juniper and cisco ASA. Phase 1 is up on running only phase 2 is working at all. Debug also Doesn't gave any more information

Sent from Cisco Technical Support iPhone App

[Parminder Sian]

Hi,

Well if phase one is coming up and issue is with phase two only, then you might need to look into issue listed in the following doc:-

http://www.cisco.com/en/US/partner/products/ps6120/products_tech_note09186a00807e0aca.shtml

Make sure that all the policies and access-lists etc matches on both sides.

Also, what output do you get from commands:-

sh cry isa sa

sh cry ipsec sa

Can we have a look at the config of ASA?

Sian