IPSEC only from one side (side with rays)

Hello

I have a star with IPSEC configuration.

If the interesting traffic comes to speak it, the IPSEC Security Association starts and works perfectly. However, once the link is inactive on and there is no traffic, the hub shows this with the command sh its crypto isa

196.47.133.38 185.20.242.61 QM_IDLE 1017 ACTIVE

SH cryp peer ips of his 196.47.133.38 shows nothing at all.

I checked my itinerary and NAT refuse to ensure that is not the issue.

I then checked the crypto ACL when I send the traffic, I see the crypto ACL are increment correctly, but still the SA will not turn on. If I look at ipsec debugging I see nothing.

I use a dynamic with each end map spoke in its own ACL, as follows:

Crypto-map dynamic dynmap 5

defined by peer 111.116.206.92

the transform-set des-transform value

match address 171

Crypto-map dynamic dynmap 10

defined by peer 111.47.132.38

the transform-set des-transform value

match address 172

Crypto-map dynamic dynmap 15

defined by peer 111.174.150.47

the transform-set des-transform value

match address 173

Crypto-map dynamic dynmap 20

defined by peer 111.166.108.250

the transform-set des-transform value

match address 174

Crypto-map dynamic dynmap 100

the transform-set des-transform value

match address 170

c2800nm-adventerprisek9_ivs_li - mz.151 - 4.m6.bin on a 2811

Any ideas?

Thank you
Alan

HI Alan,

1. Please remember that when you dynamic user cryptomaps they are most of the time used for the customer site or say remotely, access VPN but can also be used as a site to site vpn when you Wan to restrict this part can initiate the tunnel and another part with dynamic map can never inititte a tunnel , and in this condition your gateways never knows the IP address of the other side clientand so never begin a connection for users of the House or on the Internet in order to build a tunnel. Only home user have to inititite a connection for establishing a tunnel if necessary because he IP could be dynamic and HUB you never know hihc IP they will come as IP might change based on the location or the ISP you connect from.

2. Once you give a dynamic cryptomap on you ASA, you mean you don't know other IP side together like said above, and only when the other side of the peers in this business case will initiate a tunnel and thus no established peer IP no sense in dyanamic crypto card.

3. Once you set a dynamic crypto maps, you still havve to associate it with the crypto statsic map as you cannot associate a dynamic encryption directly map to our part = interface device.

example of

step 1

set the network card crypto as follows:

crypto dynamic-map mymap 1 set transform-set myset crypto dynamic-map mymap 1 set reverse-route

(in line 2 you are instructing your ASA or HUB device that

other client after establishing a client to site tunnel with this machine can insert

a static route dynamically on the rop of the routing table so that the trafic for client can use static route instead of using defaut route and could save tie else it has to traverse through all the router to reach deault route very time communication happens between

the new IP of the cleint machine from HOme iNternet to office firewall /ASAthe so that )




step 2


Now call this above dynamic map named mymap into a static crypto map(named dyn-map) as follows
 crypto map dyn-map 10 IPSec-isakmp dynamic mymap


step 3


Assign this static crypto map to an interface so as to actually apply dynamic crpto map as told befor eit cant be applied directly:


crypto map dyn-map interface outside


Please share the configuration of HUB and spoke ina  separate separate fille and state who is HU and who are spoke 1 spoke 2 spoke 3 and so on.


Hope I could offer you more clear help after that.


best regards


sachin garg

[email protected]/* */

Tags: Cisco Security

Similar Questions

  • Headset only produce sound from one side

    Posted on behalf of a client:

    We gathered that the client is running Windows 7 Edition home premium. His speaker system works very well, but he is no longer able to hear the sound from one side of his helmet. We asked that he try it with another game, but the customer doesn't have access to that. Unfortunately the helmet have no guarantee of return is not an option.

    If you can think of any errors which could cause which is not the fault of the headphones, please do not hesitate to comment.

    Thank you

    Social media - Gary W.

    #2-the headphones themselves might be damaged. You said that it was not another pair to test with.

    I'm sure that the wax will not damage a pair of headphones. I deal with a LOT of people who use their phones and have never heard of that happening.

    #3-juste looking at him, you can't tell if residents have suffered damage

    I'm guessing that he has never worked?

    The only other thing to check would be if there is a specific sound software installed on the system that you can adjust the balance between the edge speakers and external separately.

    You can get a cheap set of the Atria or at any dollar store.

  • Cannot copy master items from one side to the other (pages face to face) with the help of stick in place.

    I am trying to copy text from one side of a master page two "facing pages" face to another using Paste in place, then I me identical Master Articles for both pages, but stick it in place is not working.

    I select one side of A-master in the pages Panel (where I have the master items), the copy, and then by selecting the other side of the A-master, then glue in place.  But the points just stick on top of the original ones.

    Drag the items by pressing the alt key on the other side. In addition the SHIFT key keep aligned.

  • Why display started moving, as shaking from one side to the other?

    suddenly the screen has started to move from one side to the other, she stop for 2 seconds, and then continue to move, as shaking.

    Hello

    (1) what is the brand and model of your computer?

    (2) remember to make changes to the computer before the show?

    I would suggest trying the following methods and check if it helps.

    Method 1: Troubleshoot monitor and video card

    http://Windows.Microsoft.com/en-us/Windows-Vista/troubleshoot-monitor-and-video-card-problems

    Method 2: Flickering of the Correct monitor (refresh rate)

    http://Windows.Microsoft.com/en-us/Windows-Vista/correct-monitor-flicker-refresh-rate

    I would say as you reset the settings of the monitor to factory settings and check if that helps.

    Please consult the manual of your monitor to perform the steps.

    You can also try to connect an external monitor to the computer to check if the monitor is defective.

    It will be useful.

  • HP Pro 8600 n911a Duplex printing only on one side

    Hi Im having proplem is im using the document feeder, try to use the duplex feat. and printing only on one side

    IM using paper 8 x 11, I've changed the setting for double-sided copying print settings can somone please help...

    Hello honorable31,

    Welcome to the Forums of HP Support!

    I appreciate that you try to use the double-sided copy document feeder. This model printer the N911a does not support the loading of double-sided documents. The N911g and the n supports the loading of double-sided documents.

    So that you can accomplish something similar to come, you will need to place the original on the glass, and then press copy > settings > both sides > 1 heads 2 copy. The printer is paused in the middle of the job to allow you to turn the page on the glass.

    I hope this helps.

  • Exit only on one side

    My ipod classic only gives me an audio output on one side. I tried several headphones, it's the ipod that does not reach me. Can any ideas on how I fix?

    Probably a problem of material with plug headphones.  However, you can try to do a Reset (reboot) of iPod

    Learn how to reset your iPod - Apple Support

    If this does not help, you can try to do a restore, in case the problem is related to the software.  This erases the iPod and assigns the default condition "factory".  The restore button is on the recapitulation of the iPod settings screen in iTunes.  If a restoration is not enough, it is likely to be a hardware problem.

    If it's a defective headphone plug, you can get audio out to the dock, with an accessory connector.  For example

    https://www.Amazon.com/GP/product/B004V9G58M

  • 26.0 Firefox works do not correctly with Mac OSX 10.9.1. Text jumps from one side to the other spontaneously

    I used firefox on Mac computers for years. I am now under Maverick Mac OSX 10.9.1 and have major problems with sizing of text in windows and windows suddenly change size (much smaller) and jump on the left side of my desk. Apple does not support Firefox, so I can't get assistance on their part and Mozilla is impossible to contact them directly. Can someone please help with this problem?

    You can check the problems caused by a corrupt localstore.rdf file.

    Reset the zoom of page on pages that are causing problems.

    • View > Zoom > reset (Ctrl + 0 (zero); 0 + Command on Mac)

    Start Firefox in Safe Mode to check if one of the extensions (Firefox/tools > Modules > Extensions) or if hardware acceleration is the cause of the problem (switch to the DEFAULT theme: Firefox/tools > Modules > appearance).

    • Do NOT click on the reset button on the startup window Mode without failure.

  • I've recently updated to Mac OS x 10.6.8. Now, my HP Photosmart C6280 print only on one side.

    I did a duplex for years, and it's actually one of the features of the printer that I use most often.  It's very upsetting to access this feature disappear.

    I went to < system="" preferences="" print="" options&supplies="" driver=""> > and titled "HP" accessory of double-sided (duplexer) printing is checked.

    I unchecked it and closed, then reopened and checked system preferences box of printing double-sided again.  No change.

    I have restarted the computer - no change.

    Simply the "duplex printing" option does not appear in the print dialog box.

    My update of the Apple software is up-to-date.

    What should I do?

    I found another post on this forum, on scanning not working not not under Snow Leopard ("MacBook Pro Snow Leopard OS HP C4280 not sweeping").  There was a response from a staff member of HP who introduced me to the "washer".  I've "cleaned" all HP applications, then re-installed Apple (not HP) and - to my great relief - duplex printing control finally appeared in the print dialog box.  I have now printed both sides successfully, and the case is resolved.

    I enclose a link to the forum where the useful answer:

    cleaning and re - install HP print and scan drivers

  • My C309g is misfeeding (drawing) book only on one side

    My C309g blocks - it draws paper only on the right side and feed a piece of paper.  I cleaned the rollers, checked for debris, all removable parts off, cleaned and replaced.  No change.  Suggestions?

    There could be a device that has become damaged in the printer. If that were the case, then the printer would be able to draw on the side that are still functioning. You see the gear turns on both sides, if you look at the front as it prints?

    There is a document with steps to help fix the issues paper jam found here.

    Let me know if it helps.

  • 110 eprint only prints one side

    My desire to 110 will be printed double-sided of the word etc. because it is set as default (both through the "HP printer Assistant" and "devices and printers", but when I send a document or print it ignores the parameter by default and print the front.)

    Any ideas on how to assign eprint duplex?

    Hi TheWooster,

    Welcome to the Forums of HP's Support.  I believe that when you send a print job to your Envy 110 use ePrint printer it does not print double-sided.

    EPrint currently doesn't support duplex (print on both sides of the page).  This information is found in the document Getting Started with ePrint under the FAQ entitled "are there restrictions when you use ePrint?

  • border - only on one side of the pane thr

    I want to draw the line at the bottom of the border of a component only
    How can I do?

    With css

    -fx-border-color: transparent transparent red transparent;

  • How can I drag my clips of images from one side to the other quickly?

    Is it possible that I can drag a video clip of the right side to the left but faster that just take it

    and drag it to the left?

    I tried holding down SHIFT, alt, cmd, but key without success.

    Thanks for the help!

    Prior to zoom, select and cut out and then paste.

  • When I scan old photos on my kodak 3250 printer, when I print them, they all come from one side?

    Ive tried everything and when I preview them they seem fine., as soon as I press the impression they leave half missing or really tiny, frustrating pic that I bought the printer in the main purpose to get copies of the pictures of grandparents etc for my mam. any help appreciated :D

    Hello

    1. what operating system is installed on your computer?
    2 did you change your computer, after which the issue started?

    I recommend you to follow these steps and check if they help.

    Step 1:

    Open the printer Troubleshooter and check if this helps solve the problem.

    Step 2:

    Updated drivers from the manufacturer's Web site and check if this is useful.

    If the steps above do not help, I guess it takes to change some settings in the printer settings. Please consult the user manual, once more.

  • Is it possible to save a pan from one side to the other effect by mixing

    Hello

    is it possible to register an effect of pan to the left speaker right another track has been filed and I mix?

    Yes, use Automation.

  • only one side of the race

    Hello, I have a side border at iteam.

    I can't know all the properties in flex / as reference how to apply STROKE only on one side of the element.

    would be happy to hear that any information about you.

    Thank you

    jbeynar

    There are different possibilities.

    For example, you can try s:Line or s:Path - both would give you a lot of flexibility.

    FTQuest

Maybe you are looking for