Cisco ASA VPN

[iburlacu]

I have a vpn connection between two cisco asa 5512 that failed. I restored an older backup with ASDM but the vpn is still down. What can I do to restore the vpn? Thank you.

[MHM Cisco World]

can you more elaborate 

[iburlacu]

The VPN was L2L, had crypto map configured with "ip" traffic selection and was functional. I added icmp to the traffic selection and the vpn failed. On such a cisco I did a restore to a backup from 26.07.2023 when the vpn was functional, but even with this configuration I did not manage to make the vpn functional. What I did wrong?

[MHM Cisco World]

friend are you use SLA monitor in ASA for ISP ?

[iburlacu]

no

[MHM Cisco World]

Is s2s vpn is ikev2 ? If yes make peer clear crypto isakmp and clear crypto sa

[iburlacu]

No, its ikev1.

[MHM Cisco World]

Did you try initiate traffic to make tunnel up?

[iburlacu]

I try initiate traffic with packet tracer.

[MHM Cisco World]

Do packet tracer twice to work.

Also for rsa what is auth of vpn you use psk or rsa 

[iburlacu]

I talked to someone and he told me to access the show crypto key mypubkey rsa command and copy the key data, but I didn't understand where.

[iburlacu]

I used psk.

[MHM Cisco World]

Ok' 

1- add psk again' sometime between backup and restore the config the pks is corrupt 

2- do packet-tracer twice to make tunnel up or connect pc and initiate real traffic 

[iburlacu]

I verify psk with: more system: running-config | in key and is correct. I use packet-tracer twice and the same result: MM_WAIT_MSG2. 

[MHM Cisco World]

Can you access to both asa ?

If yes access and clear crypto sa and clear crypto isakmp