Hi Anisha,
after running the said command now i am able to ping the remote Machine.
please find the Details:
Netlink-OS-ASA# sh crypto isakmp sa
Active SA: 1
Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 1
1 IKE Peer: h.sonivwall.VPN
Type : L2L Role : initiator
Rekey : no State : MM_ACTIVE
Netlink-OS-ASA# sh cry
Netlink-OS-ASA# sh crypto ips sa
Netlink-OS-ASA# sh crypto ips sa
interface: outside
Crypto map tag: outside_map, seq num: 1, local addr: 122.168.191.66
access-list outside_1_cryptomap permit ip host h.Amol_combine_vpn host h.c ombine_IPSupport_vpn
local ident (addr/mask/prot/port): (h.Amol_combine_vpn/255.255.255.255/0/0 )
remote ident (addr/mask/prot/port): (h.combine_IPSupport_vpn/255.255.255.2 55/0/0)
current_peer: h.sonivwall.VPN
#pkts encaps: 19, #pkts encrypt: 19, #pkts digest: 19
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 19, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0
local crypto endpt.: 122.168.191.66, remote crypto endpt.: h.sonivwall.VPN
path mtu 1500, ipsec overhead 58, media mtu 1500
current outbound spi: 3E7D70DD
inbound esp sas:
spi: 0xDA704CF7 (3664792823)
transform: esp-3des esp-sha-hmac none
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 3727360, crypto-map: outside_map
sa timing: remaining key lifetime (kB/sec): (4275000/28558)
IV size: 8 bytes
replay detection support: Y
outbound esp sas:
spi: 0x3E7D70DD (1048408285)
transform: esp-3des esp-sha-hmac none
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 3727360, crypto-map: outside_map
sa timing: remaining key lifetime (kB/sec): (4274998/28556)
IV size: 8 bytes
replay detection support: Y
Crypto map tag: outside_map, seq num: 1, local addr: 122.168.191.66
access-list outside_1_cryptomap permit ip host h.Amol_combine_vpn host h.c ombine_citrixserver_vpn
local ident (addr/mask/prot/port): (h.Amol_combine_vpn/255.255.255.255/0/0 )
remote ident (addr/mask/prot/port): (h.combine_citrixserver_vpn/255.255.25 5.255/0/0)
current_peer: h.sonivwall.VPN
#pkts encaps: 195, #pkts encrypt: 195, #pkts digest: 195
#pkts decaps: 194, #pkts decrypt: 194, #pkts verify: 194
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 196, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0
local crypto endpt.: 122.168.191.66, remote crypto endpt.: h.sonivwall.VPN
path mtu 1500, ipsec overhead 58, media mtu 1500
current outbound spi: A8485A5E
inbound esp sas:
spi: 0xDEE67DEA (3739647466)
transform: esp-3des esp-sha-hmac none
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 3727360, crypto-map: outside_map
sa timing: remaining key lifetime (kB/sec): (4274988/28397)
IV size: 8 bytes
replay detection support: Y
outbound esp sas:
spi: 0xA8485A5E (2823314014)
transform: esp-3des esp-sha-hmac none
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 3727360, crypto-map: outside_map
sa timing: remaining key lifetime (kB/sec): (4274988/28395)
IV size: 8 bytes
replay detection support: Y
thnaks,
Saroj
