Cisco ASA5512-X and Cisco 877 router

[manojyesh]

Hi All,

We have 14branches and all sites are connected with our  headoffice via VPN site-to-site.

Existing Infrastucture Cisco 1841 at HO with Dynamic IP from ISP.

Branch router cisco 877 with Dynamic IP from ISP.

All sites are connected perfectly and working.At our Headoffice we are going to change Cisco 1841 to ASA5512-X firewall + VPN and branch router remains the same.We configured the ASA IOS 9.1 and tunnel is not establishing.At the branch router its show MM-SA-SETUP when  try to show crypto is sa.All phase are correctly configured at ASA.Is there any chnages to be done on branch router.Both sites uses dynamic ip.Please advise adnd help to resolve the issue.

Thanks

[Marius Gunnerud]

All phase are correctly configured at ASA

Are you sure that they are?  Are you using a dynamic crypto map on the ASA?

​If you have configured the ASA with dynamic crypto map for the connection then try resetting the branch router vpn connection:

clear crypto isa 

clear crypto ipsec sa

--

Please remember to select a correct answer and rate helpful posts