Hello,
I'm trying to made a VPN Connection between a Cisco ASA 5510 with appliance 8.2(1), and the VPN is established i receive traffic i see the responses come to firewall but this responses never came to the destination, sometimes in the ipsec sa stats i saw the follwint two errors:
*** ESP SA deleted ***
*** Tunnel rekeyed or deleted ***
Did anyone know how to resolve this?
There are the stats from the tunnel:
peer address: 82.154.252.14
Crypto map tag: routemap, seq num: 3, local addr: 194.38.128.122
access-list vpn2benfica permit ip 10.35.0.0 255.255.0.0 10.35.105.0 255.255.255.0
local ident (addr/mask/prot/port): (10.35.0.0/255.255.0.0/0/0)
remote ident (addr/mask/prot/port): (10.35.105.0/255.255.255.0/0/0)
current_peer: 82.154.252.14
#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 25, #pkts decrypt: 25, #pkts verify: 25
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0
local crypto endpt.: 194.38.128.122, remote crypto endpt.: 82.154.252.14
path mtu 1500, ipsec overhead 58, media mtu 1500
current outbound spi: 6656E3A1
inbound esp sas:
spi: 0xA27D9582 (2726139266)
transform: esp-3des esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 49012736, crypto-map: routemap
sa timing: remaining key lifetime (sec): 3567
IV size: 8 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x03FFFFFF
outbound esp sas:
spi: 0x6656E3A1 (1716970401)
transform: esp-3des esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 49012736, crypto-map: routemap
sa timing: remaining key lifetime (sec): 3567
IV size: 8 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001
Some captures:
1: 08:45:50.145668 10.35.105.253 > 10.35.100.1: icmp: echo request
2: 08:45:50.145896 10.35.100.1 > 10.35.105.253: icmp: echo reply
3: 08:45:52.147407 10.35.105.253 > 10.35.100.1: icmp: echo request
4: 08:45:52.147682 10.35.100.1 > 10.35.105.253: icmp: echo reply
5: 08:45:52.677134 10.35.105.11.137 > 10.35.100.7.137: udp 50
6: 08:45:52.679926 10.35.100.7.137 > 10.35.105.11.137: udp 157
7: 08:45:52.696634 10.35.105.11.137 > 10.35.100.7.137: udp 50
8: 08:45:52.696848 10.35.100.7.137 > 10.35.105.11.137: udp 157
9: 08:45:52.728355 10.35.105.11.137 > 10.35.100.7.137: udp 50
10: 08:45:52.728752 10.35.100.7.137 > 10.35.105.11.137: udp 157
11: 08:45:52.729103 10.35.105.11.137 > 10.35.100.7.137: udp 50
12: 08:45:52.729378 10.35.100.7.137 > 10.35.105.11.137: udp 157
13: 08:45:54.149986 10.35.105.253 > 10.35.100.1: icmp: echo request
14: 08:45:54.150489 10.35.100.1 > 10.35.105.253: icmp: echo reply
15: 08:45:56.152320 10.35.105.253 > 10.35.100.1: icmp: echo request
16: 08:45:56.152702 10.35.100.1 > 10.35.105.253: icmp: echo reply
17: 08:45:58.154868 10.35.105.253 > 10.35.100.1: icmp: echo request
18: 08:45:58.155112 10.35.100.1 > 10.35.105.253: icmp: echo reply
19: 08:46:00.156333 10.35.105.253 > 10.35.100.1: icmp: echo request
20: 08:46:00.156638 10.35.100.1 > 10.35.105.253: icmp: echo reply
21: 08:46:02.167166 10.35.105.253 > 10.35.100.1: icmp: echo request
22: 08:46:02.167380 10.35.100.1 > 10.35.105.253: icmp: echo reply
4: 08:45:52.147682 10.35.100.1 > 10.35.105.253: icmp: echo reply
Phase: 1
Type: CAPTURE
Subtype:
Result: ALLOW
Config:
Additional Information:
MAC Access list
Phase: 2
Type: ACCESS-LIST
Subtype:
Result: ALLOW
Config:
Implicit Rule
Additional Information:
MAC Access list
Phase: 3
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
Additional Information:
Found flow with id 482926463, using existing flow
Phase: 4
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
Additional Information:
Found flow with id 482805212, using existing flow
Result:
Action: allow
5: 08:46:18.226825 10.35.105.253 > 10.35.100.1: icmp: echo request
6: 08:46:18.227069 10.35.100.1 > 10.35.105.253: icmp: echo reply
Phase: 1
Type: CAPTURE
Subtype:
Result: ALLOW
Config:
Additional Information:
MAC Access list
Phase: 2
Type: ACCESS-LIST
Subtype:
Result: ALLOW
Config:
Implicit Rule
Additional Information:
MAC Access list
Phase: 3
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
Additional Information:
Found flow with id 482928087, using existing flow
Phase: 4
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
Additional Information:
Found flow with id 482805212, using existing flow
Result:
Action: allow
7: 08:46:20.235858 10.35.105.253 > 10.35.100.1: icmp: echo request
8: 08:46:20.236102 10.35.100.1 > 10.35.105.253: icmp: echo reply
Phase: 1
Type: CAPTURE
Subtype:
Result: ALLOW
Config:
Additional Information:
MAC Access list
Phase: 2
Type: ACCESS-LIST
Subtype:
Result: ALLOW
Config:
Implicit Rule
Additional Information:
MAC Access list
Phase: 3
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
Additional Information:
Found flow with id 482928260, using existing flow
Phase: 4
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
Additional Information:
Found flow with id 482805212, using existing flow
Result:
Action: allow
