Hi everyone
I'm having issues configuring a site to site VPN between ASA and Checkpoint device. At this point, we have check that interesting traffic, encryption and hashing algorithms are ok.
When we originate traffic from the network attached to ASA phase 1 comes up and also phase 2, we saw traffic getting encapsulated but there is no response inside the tunnel. We take captures from the ASA and we saw that responses are coming from port 4500 out of the tunnel. For this, we disable NAT-T on the crypto map for that specific VPN.
However, now we are seeing a lot of phase 2 negotiations going up and down on this VPN, where ASA is generating new ISAKMP Initiator request and modifying SPI values.
Any ideas about what can be happening here?
Thanks in advanced for any comment you have.
Regards
