Showing results for 
Search instead for 
Did you mean: 

L2L IKEV1 tunnel successful phase 1, but terminates phase 2



I'm trying to learn L2L VPN setup for a class lab. I'm using the following guide for reference:

There is no NAT involved. I've attached my configs for both ASAs, debug output from the initiating firewall, and a screenshot of the network layout. I am setting up an IKEV1 tunnel between two ASAs. The network layout is:

( ----> FW1 -----> ( ------> FW2 ------> (

Based on the output, phase one completes:

Nov 06 20:46:41 [IKEv1]Group =, IP =, PHASE 1 COMPLETED

Phase 2 terminates with the following reason:

Nov 06 20:46:41 [IKEv1]Group =, IP =, Connection terminated for peer  Reason: Peer Terminate  Remote Proxy, Local Proxy

I understand that the issue can be ACL related. I only have one ACL in place on each firewall:

The ACL for FW1 is: access-list LAN1_LAN2 extended permit ip

The ACL for FW2 is: access-list LAN2_LAN1 extended permit ip

I'm continuing to troubleshoot, but any insight on what I might be doing wrong would be very appreciated. It seems a simple setup, so I think I'm making some very basic mistake.





1 Reply 1

MHM Cisco World
VIP Mentor VIP Mentor
VIP Mentor

crypto ipsec ikev1 transform-set TRANSFORM_ME esp-aes esp-sha-hmac

crypto ipsec ikev1 transform-set TRANSFORM_ME esp-aes-256 esp-sha-hmac

mismatch Phase2 transform proposal between two ASA,
this is issue solve it and check again 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers