ASA 5510 to Sonicwall TZ205 - Upgrade to ASA 9.1.6 breaks VPN Tunnel

[Kevin Lotko]

After upgrading from 8.4.5 to 9.1.6 my site to site tunnel between an ASA 5510 and a Sonicwall TZ 205 is "up" and I can ping each other's external interface however I can not ping LAN to LAN.

[rvarelac · Accepted solution]

Hi Kevin ,

They should not be any difference on the VPN config between those versions ,  can you try to run a packet-tracer on the ASA or place a capture on the inside while sending traffic.

Example:

packet-tracer input  inside icmp < src IP> 8 0 <dst IP>

Capture vpn interface inside match ip host <src> host <dst>

Hope it helps

-Randy-

[Kevin Lotko]

packet-tracer helped to figure out and understand what was causing the problem. Was related an unused crypto map configuration