VPN phase 2 issue

[Abhirajsingh yadav]

Hi

I am Abhi  I am facing problem in 2nd phase of vpn betwen two ASA . The issues the tunnel is up but in the second phase the  traffic is encrypting but not decrypting expect NAT-T what could be the issue plz let me know                  

[Jouni Forss · Accepted solution]

Hi,

Without any specific info the problem might also be that the remote end just hasnt allowed the connections you are attempting through the L2L VPN. In this case you wouldnt see any traffic returning from the remote end. In other words there might be a missing ACL rule in the remote end.

Do you have control of both of the ASAs? Can you share any configurations or log messages related to the problem?

- Jouni

[Abhirajsingh yadav]

The problem was i had port based acl and my client had configuration for ip based acl so there was the problem...

Thanks