Unable to establish site to site vpn between asa 5505 an 5510

[hugochengym]

Hi ALL expert

We are now plan to form a site to site IPSec VPN tunnel between ASA 5505 (ASA Version 8.4) and ASA 5510 (ASA Version 8.0) but failure, would you please teach me how to establish it? Any reference guide?

Hugo

[Karsten Iwen · Accepted solution]

Here are the links to the cisco config-guides:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/site2sit.html

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/vpn_site2site.html

In addition to VPN you need to look into NAT exemption:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/cfgnat.html#wp1043541

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/nat_overview.html#wpxref25608

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/nat_rules.html#wp1232160

And lots of examples:

http://www.cisco.com/en/US/products/ps6120/prod_configuration_examples_list.html

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[hugochengym]

Hi

Followed your reference guide but still cannot establish tunnel

Hugo

[hugochengym]

i got error syslog 713902 and 713903, How to fix?

Hugo

[hugochengym]

I got the follwoing when i type "sh crypto isakmp sa"

Type    : user            Role    : initiator

Rekey   : no              State   : MM_WAIT_MSG2