Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
711
Views
0
Helpful
2
Replies

VPN site to site

Kangalala
Level 1
Level 1

‎09-19-2017 11:55 PM - edited ‎03-12-2019 04:33 AM

Hi,

 

I have set up a VPN site to site using Cisco ASA 55xx

 

Tunnel only comes up when traffic is iniciated only from the remote peer side.

 

My packet tracer shows that VPN encryption is being dropped.

 

When tunnel has been started by peer and is up, I then use my packet tracer and packet is allowed.

 

It looks like the firewall is only able to be the responder side and not the iniciator for some reason.

 

Any help guys?

 

 

Labels:
Preview file
3 KB
0 Helpful
2 Replies 2

Kangalala
Level 1
Level 1

‎09-19-2017 11:58 PM

Adding the packet tracer output VPN being dropped

Preview file
3 KB
0 Helpful

GioGonza
Level 4
Level 4
In response to Kangalala

‎09-22-2017 12:38 PM

Hello @Kangalala,

Can you run the debugs and share the working and non-working information?

debug crypto isakmp 250
debug crypto ipsec 250

Gio
0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents