VPN traffic connection issue

[James Simpson]

Hi All

I am having an Issue where I have Jupiter Router and I am trying set Site to Site VPN up.

I can send the traffic from jupiter - router to Mars ASA however I am not getting any traffic coming back

Please could you help

Thanks

[Jennifer Halim]

Jupiter router crypto ACL does not look correct.

For both crypto map, you have ACL: "match address langleyvpn" and "match address windsorvpn", however both those ACl does not exist.

You have acl "Marsvpn" and "saturnvpn" configured, so you would need to reference those in the crypto ACL.

On the MARS ASA, you wuold also need to configure NAT exemption:

object network obj-192.168.0.0

     subnet 192.168.0.0 255.255.248.0

object network obj-192.168.224.0

     subnet 192.168.224.0 255.255.255.192

nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.224.0 obj-192.168.224.0