Thanks!!!
I can ping and RDP to the .38 subnet now.
It was working with the R910... weird.
Result of firewall command: "show cry isa sa"
Total : 2
Embryonic : 0
dst src state pending created
xxx.xxx.131.50 xxx.xxx.109.202 QM_IDLE 0 1
xxx.xxx.131.50 MaderaPublicIP QM_IDLE 0 1
Result of firewall command: "show cry ipsec sa"
interface: outside
Crypto map tag: outside_map, local addr. xxx.xxx.131.50
local ident (addr/mask/prot/port): (192.168.38.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (TJhome/255.255.255.0/0/0)
current_peer: xxx.xxx.174.234:0
PERMIT, flags={origin_is_acl,}
#pkts encaps: 0, #pkts encrypt: 0, #pkts digest 0
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify 0
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0, #pkts decompress failed: 0
#send errors 0, #recv errors 0
local crypto endpt.: xxx.xxx.131.50, remote crypto endpt.: xxx.xxx.174.234
path mtu 1500, ipsec overhead 0, media mtu 1500
current outbound spi: 0
inbound esp sas:
inbound ah sas:
inbound pcp sas:
outbound esp sas:
outbound ah sas:
outbound pcp sas:
local ident (addr/mask/prot/port): (192.168.38.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (Clovis/255.255.255.0/0/0)
current_peer: ClovisPublicIP:500
PERMIT, flags={origin_is_acl,}
#pkts encaps: 583402, #pkts encrypt: 583402, #pkts digest 583402
#pkts decaps: 488911, #pkts decrypt: 489259, #pkts verify 489259
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0, #pkts decompress failed: 0
#send errors 9, #recv errors 0
local crypto endpt.: xxx.xxx.131.50, remote crypto endpt.: ClovisPublicIP
path mtu 1500, ipsec overhead 56, media mtu 1500
current outbound spi: b6cdd596
inbound esp sas:
spi: 0x6e0a787f(1846179967)
transform: esp-des esp-md5-hmac ,
in use settings ={Tunnel, }
slot: 0, conn id: 17, crypto map: outside_map
sa timing: remaining key lifetime (k/sec): (4588983/15729)
IV size: 8 bytes
replay detection support: Y
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0xb6cdd596(3066942870)
transform: esp-des esp-md5-hmac ,
in use settings ={Tunnel, }
slot: 0, conn id: 18, crypto map: outside_map
sa timing: remaining key lifetime (k/sec): (4587655/15728)
IV size: 8 bytes
replay detection support: Y
outbound ah sas:
outbound pcp sas:
local ident (addr/mask/prot/port): (192.168.38.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (Oakurst/255.255.255.0/0/0)
current_peer: OakurstPublicIP:500
PERMIT, flags={origin_is_acl,}
#pkts encaps: 484038, #pkts encrypt: 484038, #pkts digest 484038
#pkts decaps: 368994, #pkts decrypt: 369042, #pkts verify 369042
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0, #pkts decompress failed: 0
#send errors 1, #recv errors 0
local crypto endpt.: xxx.xxx.131.50, remote crypto endpt.: OakurstPublicIP
path mtu 1500, ipsec overhead 56, media mtu 1500
current outbound spi: 49faf47a
inbound esp sas:
spi: 0xc4f036f4(3304077044)
transform: esp-des esp-md5-hmac ,
in use settings ={Tunnel, }
slot: 0, conn id: 6, crypto map: outside_map
sa timing: remaining key lifetime (k/sec): (4599137/15741)
IV size: 8 bytes
replay detection support: Y
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0x49faf47a(1241183354)
transform: esp-des esp-md5-hmac ,
in use settings ={Tunnel, }
slot: 0, conn id: 5, crypto map: outside_map
sa timing: remaining key lifetime (k/sec): (4604307/15741)
IV size: 8 bytes
replay detection support: Y
outbound ah sas:
outbound pcp sas:
local ident (addr/mask/prot/port): (192.168.38.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (Madera/255.255.255.0/0/0)
current_peer: MaderaPublicIP:500
PERMIT, flags={origin_is_acl,}
#pkts encaps: 258293, #pkts encrypt: 258293, #pkts digest 258293
#pkts decaps: 137202, #pkts decrypt: 137202, #pkts verify 137202
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0, #pkts decompress failed: 0
#send errors 1, #recv errors 0
local crypto endpt.: xxx.xxx.131.50, remote crypto endpt.: MaderaPublicIP
path mtu 1500, ipsec overhead 56, media mtu 1500
current outbound spi: fccf0d4f
inbound esp sas:
spi: 0xfa9b1699(4204467865)
transform: esp-des esp-md5-hmac ,
in use settings ={Tunnel, }
slot: 0, conn id: 4, crypto map: outside_map
sa timing: remaining key lifetime (k/sec): (4605151/2356)
IV size: 8 bytes
replay detection support: Y
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0xfccf0d4f(4241427791)
transform: esp-des esp-md5-hmac ,
in use settings ={Tunnel, }
slot: 0, conn id: 3, crypto map: outside_map
sa timing: remaining key lifetime (k/sec): (4601504/2356)
IV size: 8 bytes
replay detection support: Y
outbound ah sas:
outbound pcp sas:
local ident (addr/mask/prot/port): (192.168.38.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (TomJ/255.255.255.0/0/0)
current_peer: xxx.xxx.109.202:500
PERMIT, flags={}
#pkts encaps: 241, #pkts encrypt: 241, #pkts digest 241
#pkts decaps: 227, #pkts decrypt: 227, #pkts verify 227
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0, #pkts decompress failed: 0
#send errors 0, #recv errors 0
local crypto endpt.: xxx.xxx.131.50, remote crypto endpt.: xxx.xxx.109.202
path mtu 1500, ipsec overhead 56, media mtu 1500
current outbound spi: 9f4bbe4c
inbound esp sas:
spi: 0xd1438cf9(3510865145)
transform: esp-des esp-md5-hmac ,
in use settings ={Tunnel, }
slot: 0, conn id: 16, crypto map: outside_map
sa timing: remaining key lifetime (k/sec): (4607957/28635)
IV size: 8 bytes
replay detection support: Y
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0x9f4bbe4c(2672541260)
transform: esp-des esp-md5-hmac ,
in use settings ={Tunnel, }
slot: 0, conn id: 15, crypto map: outside_map
sa timing: remaining key lifetime (k/sec): (4607947/28634)
IV size: 8 bytes
replay detection support: Y
outbound ah sas:
outbound pcp sas:
