cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
742
Views
0
Helpful
1
Replies

VPN Issue with 1010

rob1456657
Beginner
Beginner

Now I have a new issue...

I have a configured Cisco Firepower 1010 with an S2S Tunnel to an ASA 5515x (IKEv2). Traffic is flowing fine to the ASA5515. However, we also have tunnels to the remote sites and they connect IKEv1 to the ASA5515.

 

I have noticed messages in the Log Viewer that state “IKEv2 Negotiation aborted due to ERROR: Create child exchange failed”

Has anyone had issues with such a setup?

1010 (S2S IKEv2) --> ASA5515 (S2S IKEv2)

REM1 (S2S IKEv1 )--> ASA5515 (S2S IKEv1)

Pings and traffic from 1010 --> ASA5515 - Work

Pings and traffic from REM1--> ASA5515 - Work

Pings and traffic from 1010 --> REM1 - Does Not Work

 

Anyone run into this before?

1 Reply 1

rob1456657
Beginner
Beginner

If anyone looked at this and pondered it, thanks for at least looking but I resolved the issue.

Turns out the Network Object we created didn't cover the interesting traffic so the firewall was trying to send it out to the internet rather than through the tunnel.

Once I reconfigured the network object to include the correct scope everything worked as it should! 

It's the little things that get ya!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers