Hi there
when i say i am able to pass traffic one way, i meant the tunnel is up successfully and shows active at both ends cyberoam and asa, any other thoughts
issue is not with initiate traffic.
this what the command gives me
interface: outside
Crypto map tag: MAP, seq num: 1, local addr: 178.1.1.6
local ident (addr/mask/prot/port): (10.1.1.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.10.50.0/255.255.255.0/0/0)
current_peer: 83.1.1.1
#pkts encaps: 3, #pkts encrypt: 3, #pkts digest: 3
#pkts decaps: 3, #pkts decrypt: 3, #pkts verify: 3
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 3, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0
local crypto endpt.: 178.1.1.6/0, remote crypto endpt.: 83.1.1.1 /0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: 7802E188
current inbound spi : DEB615CE
inbound esp sas:
spi: 0xDEB615CE (3736475086)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, PFS Group 2, IKEv1, }
slot: 0, conn_id: 24576, crypto-map: MAP
sa timing: remaining key lifetime (sec): 17317
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x0000000F
outbound esp sas:
spi: 0x7802E188 (2013454728)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, PFS Group 2, IKEv1, }
slot: 0, conn_id: 24576, crypto-map: MAP
sa timing: remaining key lifetime (sec): 17317
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001
regards
