Site to Site VPN Troubleshoot

[billybong]

Hi all, I’m hoping someone can point me in the right direction
I have site to site vpn from the US to the UK, but the connection will only become active when it’s pinged from the US side
any ideas
greatly received

[Rob Ingram]

@billybong It sounds like you have a policy based VPN (crypto map), so there could be several reasons. If it is a dynamic crypto map, then only one side can initiate the connection. Or if a static crypto map and one side is set to answer/respond only, then that peer will not attempt to establish a connection.

If you were using VTI then the tunnel would can always be established without having to generate interesting traffic.

Provide more information on your design.

[billybong]

thanks for the quick reply
it’s a static map, how do i check if one side set incorrectly

[MHM Cisco World]

static IPSec then check if one side is responder only. 
responder only meaning it not start IPsec until other end start IPsec tunnel establish. 

[Rob Ingram]

@billybong what device are you using?

On the ASA - crypto map map-name seq-num set connection-type ( answer-only | originate-only | bidirectional )

https://www.cisco.com/c/en/us/td/docs/security/asa/asa-cli-reference/A-H/asa-command-ref-A-H/crypto-is-cz-commands.html