IPSEC tunnel upward - traffic has failed. TTL expired on one side.

Soho office:

Site has, ASA 5505

10.29.0.XX/24

Main office:

Site b, ASA 5540

10.75.0.XX/24

Tunnel establishes - phase one and two good.  Packet tracer completes successfully on both sides.  A customer on the site of soho cannot send pings to 10.75.0.xx but receives no response.  I see the construction and destruction on the firewall side of soho, but I get no answer.  When I kill the tunnel, send a ping command will be it restore on the side of soho.

On the side of the head office, pings sent to 10.29.0.xx return: "TTL expired in Transit".  A traceroute shows the package one loop in the firewall.  The ACL look good, cryptographic cards look great and there is no explicit way pointing elsewhere.  If I drop the tunnel, sending pings from the side main office not rebuild the tunnel.

No idea what I'm missing here or what direction to another head?

-JP

Configs of the checkpoint

Tags: Cisco Security

Similar Questions

  • the application has failed to start because its side by side configuration is incorrect

    I downloaded the new firefox and when I try to open it I get this message that the application has failed to start because its side by side configuration is incorrect

    Seems to be caused by a corrupt installation of Visual C++ (several versions can be installed-by-side).

    You can try to use the sxstrace tool to see if you can find which files are missing or damaged.

  • the application has failed to start because its side-by-side configuration is incorrect for windows live messenger

    Wen I Conect live windows Messenger tray I have this massege and I can't conect to the programe

    the application has failed to start because its side-by-side configuration is incorrect

    Hello Pecky,

    Thanks for visiting the site of the community of Microsoft Windows. The question you have posted is related to Windows Live Messenger and would be better suited to the Windows Live Solution Center Messenger Portal community. Please visit the link below to find a community that will support what ask you:

    http://windowslivehelp.com/product.aspx?ProductID=2

    Thank you

  • c:\program files\windows live\messenger\msbmsgr.exe the application has failed to start because its side-by-side configuration is incorrect

    the application has failed to start because its side-by-side configuration is incorrect

    Windows Live Messenger questions belong in the center of Windows Live Messenger Portalsolutions, not here.

    Here are the other threads "side by side".  Maybe one of them will help you:
    http://answers.Microsoft.com/en-us/search/search?searchterm=side+by+side+configuration&CurrentScope.ForumName=Windows&CurrentScope.filter=&askingquestion=false

  • Error message: the application has failed to start because its side-by-side configuration is incorrect and can not enter in the email and save records

    I get a message that says that the application has failed to start because its side-by-side configuration is incorrect. Check the log of events applications for more details.   I used this link to email for 2 years and NOW I can't in my email and all my saved folders.

    Hi KathyHendges,

    1. What mail client do you use?

    Step 1:

    You can try clicking with the right button on the link and select run as administrator and check.

    Step 2:

    This error code can occur due to corrupted Microsoft Visual c++ installation.

    To resolve this problem, you can install the latest version of visual C++ according to the version of Windows installed on your computer (32-bit or 64-bit) and check:

    Download and install Microsoft visual C++ from the below mentioned link:

    Package redistributable Microsoft Visual C++ 2010 (x 86)

    http://www.Microsoft.com/downloads/details.aspx?FamilyId=a7b7a05e-6de6-4D3A-A423-37bf0912db84&displaylang=en

    Package redistributable Microsoft Visual C++ 2010 (x 64)

    http://www.Microsoft.com/downloads/en/details.aspx?FamilyId=bd512d9e-43c8-4655-81bf-9350143d5867

    For more information, you can consult the following link:

    http://blogs.msdn.com/b/developingfordynamicsgp/archive/2010/08/20/side-by-side-configuration-is-incorrect-error-message-given-launching-Dynamics-GP.aspx

    Hope this information is useful.

  • Application has failed to start because the side-by-side configuration is incorrect in Windows Live Messenger

    Recently, my laptop has problems. My user profile cannot be loaded and even when I do another profile most of my downloaded programs is a party. But anyway, it's a different matter.

    Windows Live Messenger worked great after all this. I connected and everything was fine. But then Windows wanted an update.

    Microsoft 2011 or something like that. At halfway through the installation of the blue screen of death came. My laptop turned on fine after that, but... Windows Live Messenger has come up with the error

    Application has failed to start because the side by side configuration is incorrect

    I tried to reinstall several times. The removal of all that is on the new Windows 2011. But no no no avail. I have now no other software in the package here. But the program for Windows Live Messenger file was still there. I deleted it. Installed Windows Live Messenger again but got the same error.

    Anyone know what is happening?

    Hello

    I suggest that you post your question on the Forums of Windows Live for a better answer to this question. This is a dedicated forum for issues related to Windows Live Messenger

    http://social.answers.Microsoft.com/forums/en-us/category/windowslive

    You can also follow the troubleshooting below:

    http://support.Microsoft.com/kb/940065

    Hope the helps of information. Please post back and we do know.

  • GTA 4 has failed to start because its side-by-side configuration is incorrect

    When I click on gtaIV.exe, the window indicates that the application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe for more details.    (you can also see the image I have uploaded. help me please...)

    This problem may have different bugs, according to the version.
    What version of the game you are using, retail disk, steam or other?
    Have you tried to reinstall the game?

    [EDIT: may 2014 - how to get it marked as an answer?] I had not even gotten around

    telling the OP that we give advice to hackers.

    [Mysterious...]

    .

  • IPSec Tunnel upward, but not accessible from local networks

    Hello

    I have an ASA5520 and a Snapgear. The IPSec tunnel is in place and works very well. But I am not able to access the local LAN on both sides. Here are a few setups:

    SH crypt isakmp his

    Active SA: 1
    Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
    Total IKE SA: 1

    1   IKE Peer: 10.10.10.2
    Type    : L2L             Role    : responder
    Rekey   : no              State   : AM_ACTIVE

    Crypto/isakmp:

    crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
    crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
    crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
    crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
    crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
    crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
    crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
    crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
    crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
    crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
    crypto ipsec security-association lifetime seconds 28800
    crypto ipsec security-association lifetime kilobytes 4608000
    crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set pfs group1
    crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
    crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
    crypto map outside_map interface outside
    crypto map IPSECTEST_map0 1 match address IPSECTEST_cryptomap
    crypto map IPSECTEST_map0 1 set peer 10.10.10.2
    crypto map IPSECTEST_map0 1 set transform-set ESP-3DES-SHA
    crypto map IPSECTEST_map0 1 set nat-t-disable
    crypto map IPSECTEST_map0 1 set phase1-mode aggressive
    crypto map IPSECTEST_map0 interface IPSECTEST
    crypto isakmp enable outside
    crypto isakmp enable IPSECTEST
    crypto isakmp policy 10
    authentication pre-share
    encryption 3des
    hash sha
    group 2
    lifetime 3600

    Route SH:

    C    172.16.3.0 255.255.255.0 is directly connected, VLAN10
    C    10.10.10.0 255.255.255.0 is directly connected, IPSECTEST
    C    192.168.112.0 255.255.254.0 is directly connected, inside

    access-list:

    IPSECTEST_cryptomap list extended access allowed object-group DM_INLINE_PROTOCOL_1 172.16.3.0 255.255.255.0 object 172.20.20.0

    and here's the scenario:

    If I make a ping of the asa to the Remote LAN, I got this:

    ciscoasa (config) # ping 172.20.20.1
    Type to abort escape sequence.
    Send 5, echoes ICMP 100 bytes to 10.172.20.20.1, wait time is 2 seconds:
    No route to the host 172.20.20.1

    Success rate is 0% (0/1)

    No idea what I lack?

    Here's how to set up NAT ASA 8.3 exemption:

    network object obj - 172.16.3.0
    172.16.3.0 subnet 255.255.255.0

    network object obj - 172.20.20.0
    172.20.20.0 subnet 255.255.255.0

    NAT (inside, outside) source static obj - 172.16.3.0 obj - 172.16.3.0 destination static obj - 172.20.20.0 obj - 172.20.20.0

    Here's how it looks to the ASA 8.2 and below:

    Inside_nat0_outbound to access extended list ip 172.16.3.0 allow 255.255.255.0 172.20.20.0 255.255.255.0
    NAT (inside) 0-list of access Inside_nat0_outbound

  • Messenger: The application has failed to start because its side-by-side configuration is incorrect. Check the log of events applications for more details. How to fix?

    My Messenger was working normally, then I shut down my computer at lunch. In return, I turned it the Messenger wasn't working and this appeared:

    "The application failed to start because its side-by-side configuration is incorrect. Check the log of events applications for more details"

    Can someone help me to fix it? Thank you.

    Hello

    they will help you with your questions/problems Messenger when repost you the link below in the Messenger forums

    http://windowslivehelp.com/product.aspx?ProductID=2

  • Application has failed to start because it side-by-side configuration is incorrect.

    Hi I have a problem with Windows messenger. I can open it even after I have updated to the latest version, I get the same error message stating: "the application failed to start because its side-by-side configuration is incorrect. Check the log of events applications for more details. "Any help on this?

    Hi I have a problem with Windows messenger. I can open it even after I have updated to the latest version, I get the same error message stating: "the application failed to start because its side-by-side configuration is incorrect. Check the log of events applications for more details. "Any help on this?

    Hey Nalsato

    Here is the vista forums

    Try the repost in the Messenger link below forums

    http://www.windowslivehelp.com/product.aspx?ProductID=2

    Walter, the time zone traveller

  • Application has failed to start because its side-by-side configuration is incorrect? Please help me!

    Hello world

    I just got the new Sims 3, I installed and uninstalled several times, but every time I get the same message came 'the Launcher of the sims 3 has stopped working ".
    I checked the updates, defragmentation and tried again but no joy. In addition, the system requirements exceeds the requirements of the game.
    I spoke to someone on the EA forum and they suggested to the launcher and simply load the game, so I tried this and now I get "the application failed to start because its configuration side by side is incorrect. check the log of events applications for more information. »

    In all honesty doesn't mean a lot to me, I tried to get help from EA, but they do not respond, I hope experts can help me, it would be much appreciated.
    EM

    Hello Emma,

    Thank you for posting.  As a gamer, I have an idea of what might happen.  It seems that the configuration file for the game is not correct or may be corrupt.  Unfortunately only EA support for the Sims 3 can really help you with this problem.  I suggest that you stay in control of their forums or contact their support team.

    Using third-party software, including hardware drivers can cause serious problems that may prevent your computer from starting properly. Microsoft cannot guarantee that problems resulting from the use of third-party software can be solved. Software using third party is at your own risk.

    Zack
    Engineer Microsoft Support answers visit our Microsoft answers feedback Forum and let us know what you think.

  • The application has failed to start because its side-by-side configuration is incorrect. See the application event log or use the command-line sxstrace.exe for more details

    Hello

    I can t open Google Earth or Microsoft Office programs because I get this message - the application could not start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe for more details.

    A few days ago I could open all what programs. I put t know what is the problem.

    I did sxstrace and that's what I have-

    =================
    Launch the activation context generation.
    Input parameter:
    Flags = 0
    ProcessorArchitecture = Wow32
    CultureFallBacks = en-US; en
    ManifestPath = C:\Program Files (x 86) \Google\Google Earth\client\googleearth.exe
    AssemblyDirectory = C:\Program Files (x 86) \Google\Google Earth\client\
    Application configuration file =
    -----------------
    INFO: File analysis shows C:\Program Files (x 86) \Google\Google Earth\client\googleearth.exe.
    INFO: Manifest definition identity is (null).
    INFO: Reference: Microsoft.VC80.CRT, processorArchitecture = "x 86" publicKeyToken = "1fc8b3b9a1e18e3b", type = "win32", version = "8.0.50727.4053"
    INFO: Resolving reference Microsoft.VC80.CRT, processorArchitecture = "x 86" publicKeyToken = "1fc8b3b9a1e18e3b", type = "win32", version = "8.0.50727.4053".
    INFO: Resolving reference for ProcessorArchitecture WOW64.
    INFO: Resolving reference for the neutral culture.
    INFO: Application binding policy.
    INFO: No found publisher policy.
    INFO: No redirect political connection is found.
    INFO: Start the detection of assembly.
    INFO: Can't find the assembly in WinSxS.
    NEWS: Try to detect manifest to C:\Windows\assembly\GAC_32\Microsoft.VC80.CRT\8.0.50727.4053__1fc8b3b9a1e18e3b\Microsoft.VC80.CRT.DLL.
    INFO: Found no manifesto for the neutral culture.
    INFO: End detection of assembly.
    INFO: Resolving reference for ProcessorArchitecture x 86.
    INFO: Resolving reference for the neutral culture.
    INFO: Application binding policy.
    NEWS: Control strategy of the Publisher C:\Windows\WinSxS\manifests\x86_policy.8.0.microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.5592_none_517247830f45081d.manifest
    INFO: Start the detection of assembly.
    INFO: End detection of assembly.
    ERROR: Activation context generation failed.
    End activation context generation.

    Help, please!

    This type of error can be caused if the Visual C++ library runtime components are missing or because of a third-party software.

    Follow the steps below:
     
    Method 1:
    If the problem is caused by the lack of Visual C++ libraries, you can download and install the Runtime components of Visual C++ libraries from the link below:
     
    This error can occur when the Microsoft .NET Framework installation on the computer is damaged or is missing.

    Try it out below step to reinstall and repair installation of Microsoft .NET Framework on the computer, then check if you can install the software.

    (a) click the Start button, select Control Panel, click programs and then click on 'Turn Windows has or not.' If you are prompted for an administrator password or a confirmation, type the password or provide confirmation.

    (b) search for Microsoft .NET framework 3.5.1 uncheck, click OK and restart the computer.

    (c) after the reboot, open again "Turn Windows features on or off" and place a check next to Microsoft .NET framework 3.5.1 and restart the computer.

    Step 2

    If the previous step fails, then I suggest that you manually download and install Microsoft Visual C++ 2005 and 2008 Redistributable Package and check to see if you can install the software.

    In programs and features, you do not show that you have installed Microsoft Visual C++ 2005 Redistributable and Microsoft Visual C++ 2008 Redistributable? If this is not the case, download the links here.
     
    Package redistributable Visual C++ 2005 (X 86)
     http://www.Microsoft.com/downloads/en/details.aspx?FamilyId=32BC1BEE-A3F9-4C13-9C99-220B62A191EE&displaylang=en
     
    Visual C++ 2005 (x 64) redistributable package manager
     http://www.Microsoft.com/downloads/en/details.aspx?FamilyId=eb4ebe2d-33c0-4A47-9dd4-b9a6d7bd44da&displaylang=en

    Package redistributable Microsoft Visual C++ 2008 (x 86)

    http://www.Microsoft.com/downloads/en/details.aspx?FamilyId=9B2DA534-3E03-4391-8A4D-074B9F2BC1BF&displaylang=en

    Package redistributable Visual C++ 2008 SP1 (x 64)
     http://www.Microsoft.com/downloads/en/details.aspx?FamilyId=BA9257CA-337F-4B40-8C14-157CFDFFEE4E&displaylang=en

    I hope this helps.

  • The application has failed to start because its side-by-side configuration is incorrect, please consult us or application event log the sxstrace.exe tool of command line for more details?

    I am using Cyberlink PowerDirector 9 and the above message keeps popping up. Help?

    Hello

    Thanks for posting your question in the Microsoft Community!

    The problem may occur if your computer does not have the correct C++ runtime components for your system type. (X 86 or x 64).

    We will try the following methods and check the result.

    Method 1:

    Install the latest Microsoft Visual C++ has helped users fixing the issue.

    Later supported Visual C++ downloads

    http://support.Microsoft.com/kb/2019667

    Method 2:

    You can also try uninstalling and reinstalling Cyberlink PowerDirector 9 to check if that helps:

    For more information, see the following link:

    Uninstall or change a program

    http://Windows.Microsoft.com/en-us/Windows7/uninstall-or-change-a-program

    For more details on this topic, see the event log using Event Viewer. Please see the link below for more information on how to use Event Viewer to check the error message or information:

    http://Windows.Microsoft.com/en-us/Windows7/what-information-appears-in-event-logs-Event-Viewer

    Please check the information in Event Viewer and let us know the question briefly to provide you with a better solution.

    I hope that helps!

    If the problem persists, or you need help on Windows please keep us informed.

    We are here to help.

  • Application has failed to start because the side by side configuration is incorrect

    I get "the application could not start because the side by side configuration is incorrect, please see the application event log or use the command-line sxstrace.exe for details" whenever I try to open Microsoft Flight Simulator. What can be done to fix this?

    Check THIS link-

    If these C++ installations do not help you may need another version.
    I have 16 different C++ Redistributable on my machine, starting with six of ' 05.
    Don't know if they are all necessary. Various software was installed.

    If you have a 64 bit OS, you get X 86 and 64-bit versions.

    .

  • Help: Adding to the IPsec Tunnel encryption field Questions

    Good evening everyone,

    I'm looking for help and/or advise in what concerns adding more networking in the field of encryption of an existing IPsec site-to-site tunnel.  Both sides of the tunnel are of ASA.  The client on the remote end is eager to access the networks more on my end.  They have already updated their ACL crypto map to include the new networks.  When they perform "show crypto IPsec his counterpart x.x.x.x" it shows already encap packets attempting to join my network.

    On my side, I updated my ACL crypto map to reference the new 2 networks, created the double NAT and added the ACL needed to allow the inbound access through ports they want.  When I perform a 'see the crypto IPsec his counterpart x.x.x.x' output is NOT up-to-date with the new networks added to the field of encryption.  When I run a tracer of package of supply of one of the servers in the new network, the traffic is translated as he should, but a fall when it hits the outgoing interface for the VPN tunnel.

    Am I missing something here? Can I bounce the tunnel so that the new networks must be recognized in the surveillance society?

    Thanks in advance.

    Hello

    You must bounce the tunnel when you change the interesting traffic, otherwise the new SA will not be created, is a little funny that you say that SA is already build on the remote side, SA cannot be established only on one side, is like building a new tunnel, if you don't have it on one side, it can not simply prevail and create the entry of SA. In addition, adding new networks and bounce the tunnel you need to generate traffic to trigger the ITS new or you will never see that it created. Check your no nats and routing and it should work.

    Best regards, please rate.

Maybe you are looking for