cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
444
Views
0
Helpful
0
Replies

Ma connexion IPsec SA se crée puis est supprimée - VPN site à site cisco 2911 - Azure

perparimkadirolli
Spotlight
Spotlight

J'ai le message suivant lorsque je veux mettre en VPN en place:

 

IPSEC(create_sa): sa created,
(sa) sa_dest= 192.168.40.150, sa_proto= 50,
sa_spi= 0xEB3014CF(3945796815),
sa_trans= esp-aes 256 esp-sha256-hmac , sa_conn_id= 2041
sa_lifetime(k/sec)= (4608000/3600),
(identity) local= 192.168.40.150:0, remote= 51.103.140.25:0,
local_proxy= 192.168.0.0/255.255.255.0/256/0,
remote_proxy= 10.0.0.0/255.255.0.0/256/0
Sep 9 08:26:43.068: IPSEC(create_sa): sa created,
(sa) sa_dest= 51.103.140.25, sa_proto= 50,
sa_spi= 0x617DD714(1635637012),
sa_trans= esp-aes 256 esp-sha256-hmac , sa_conn_id= 2042
sa_lifetime(k/sec)= (4608000/3600),
(identity) local= 192.168.40.150:0, remote= 51.103.140.25:0,
local_proxy= 192.168.0.0/255.255.255.0/256/0,
remote_proxy= 10.0.0.0/255.255.0.0/256/0
Sep 9 08:27:43.068: IPSEC: delete incomplete sa: 0x3A24042C
Sep 9 08:27:43.068: IPSEC(key_engine_delete_sas): delete SA with spi 0x617DD714 proto 50 for 51.103.140.25
Sep 9 08:27:43.068: IPSEC(update_current_outbound_sa): updated peer 51.103.140.25 current outbound sa to SPI 0
Sep 9 08:27:43.068: IPSEC(send_delete_notify_kmi): not sending KEY_ENGINE_DELETE_SAS

 

Ma config:

crypto isakmp policy 1
encr aes 256
hash sha256
authentication pre-share
group 2
crypto isakmp key 6 _Uad_cGSZFeJYUP`b`IWdUfCHbHScIUH^UQh`IgbIWb^iAAB address "Public Ip Azure gateway"

!

crypto ipsec transform-set PROPOSITION-AZURE esp-aes 256 esp-sha256-hmac
mode tunnel

crypto map IPSEC-SITE-A-SITE 10 ipsec-isakmp
set peer "Public Ip Azure gateway"
set transform-set PROPOSITION-AZURE
match address 101
!

interface GigabitEthernet0/0
ip address 192.168.40.150 255.255.255.0
ip tcp adjust-mss 1350
duplex auto
speed auto
crypto map IPSEC-SITE-A-SITE

!

Extended IP access list 101
10 permit ip 192.168.0.0 0.0.0.255 10.0.0.0 0.0.255.255

 

quelqu'un pourrait m'aider à comprendre?

0 Replies 0
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: