12-01-2010 01:13 PM
Hi All,
We have recenly configured site to site VPN tunnel between Mumbai & WDC, but traffic is not flowing through the tunnel. After executing "sh crypto isakmp sa" command on FW getting below msg.
6 IKE Peer: 66.151.98.66
Type : user Role : initiator
Rekey : no State : MM_WAIT_MSG4
debug crypto isakmp output is,
INTMUM1FW0002# Dec 02 02:18:47 [IKEv1]: IP = 66.151.98.66, Information Exchange processing failed
Dec 02 02:39:14 [IKEv1]: IP = 66.151.98.66, Information Exchange processing failed
Dec 02 02:39:31 [IKEv1]: IP = 66.151.98.66, Information Exchange processing failed
Mumbai End Network -- 10.91.65.0/28
WDC End Network -- 172.16.55.0/24
Peer IP on both end is abc123
What could be the issue? i have attached both end FW config.
Thanks in advance.
12-01-2010 01:16 PM
We are using ASA 5520 on both ends with IOS version 8
.3 (1)
12-03-2010 04:59 AM
Hi Amit,
Could you please post the output of "debug cry isa 127" from both the endpoints?
Cheers,
Prapanch
12-03-2010 09:51 AM
Issue had been resloved. There was a routing issue on ISP router
.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide