Hello everyone,
I’m encountering an issue with establishing an IKEv1/IPsec VPN tunnel between two Cisco ASA devices. One ASA is located here where I work (ASA 1), and the other is in another country (ASA 2). The devices have different IKE policies, transform sets, and IPsec proposals, and it seems that the VPN tunnel cannot be established due to incompatibility between them.
The transform sets partially overlap, but I’m unsure if all necessary transform sets are included in the crypto map on both devices.
The IKE policies have different priorities on each device, which might cause a mismatch.
IPsec proposals are only defined on the ASA 1. There’s no information about IPsec proposals on the ASA 2.
How can I ensure that the transform sets, IKE policies, and IPsec proposals are aligned between these two ASA devices? What changes should I make to both devices to successfully establish the VPN tunnel?
Thank you in advance for your help!
