VPN - Syslog 713041

[drbabbers]

All,

I'm having trouble setting up a site to site VPN between 2 ASA firewalls and from my side of the tunnel I get this over and over when I generate interesting traffic:

5

Oct 23 2015

09:23:18

713041

IP = 10.10.10.1, IKE Initiator: New Phase 1, Intf Inside, IKE Peer 10.10.10.1 local Proxy Address 10.10.10.2, remote Proxy Address 192.168.130.0, Crypto map (outside_map)

I can ping the peer ip all OK and this is a fairly standard IKEv1 configuration.

Any ideas how I can proceed to troubleshoot?

Thanks

D

[Dinesh Moudgil]

Hi,

Try running the packet-tracer command that will show you all the stages the packet is going through. This will give you enough information to see if you are hitting correct natting and routing rules.

Packet-tracer input inside(interface from which the interesting traffic is generated) icmp x.x.x.x( interesting traffic at your end ) 8 0 x.x.x.x(interesting traffic at remote end) detailed 

Here is a document for your reference:-
https://supportforums.cisco.com/document/29601/troubleshooting-access-problems-using-packet-tracer

Make sure the phase 1 and phase 2 are matching on both the ASAs.
 

Regards,
Dinesh Moudgil

P.S. Please rate helpful posts.