IPSEC tunnel upward - traffic has failed. TTL expired on one side.
Soho office:
Site has, ASA 5505
10.29.0.XX/24
Main office:
Site b, ASA 5540
10.75.0.XX/24
Tunnel establishes - phase one and two good. Packet tracer completes successfully on both sides. A customer on the site of soho cannot send pings to 10.75.0.xx but receives no response. I see the construction and destruction on the firewall side of soho, but I get no answer. When I kill the tunnel, send a ping command will be it restore on the side of soho.
On the side of the head office, pings sent to 10.29.0.xx return: "TTL expired in Transit". A traceroute shows the package one loop in the firewall. The ACL look good, cryptographic cards look great and there is no explicit way pointing elsewhere. If I drop the tunnel, sending pings from the side main office not rebuild the tunnel.
No idea what I'm missing here or what direction to another head?
-JP
Configs of the checkpoint
Tags: Cisco Security
Similar Questions
-
the application has failed to start because its side by side configuration is incorrect
I downloaded the new firefox and when I try to open it I get this message that the application has failed to start because its side by side configuration is incorrect
Seems to be caused by a corrupt installation of Visual C++ (several versions can be installed-by-side).
You can try to use the sxstrace tool to see if you can find which files are missing or damaged. -
Wen I Conect live windows Messenger tray I have this massege and I can't conect to the programe
the application has failed to start because its side-by-side configuration is incorrect
Hello Pecky,
Thanks for visiting the site of the community of Microsoft Windows. The question you have posted is related to Windows Live Messenger and would be better suited to the Windows Live Solution Center Messenger Portal community. Please visit the link below to find a community that will support what ask you:
http://windowslivehelp.com/product.aspx?ProductID=2
Thank you
-
the application has failed to start because its side-by-side configuration is incorrect
Windows Live Messenger questions belong in the center of Windows Live Messenger Portalsolutions, not here.
Here are the other threads "side by side". Maybe one of them will help you:
http://answers.Microsoft.com/en-us/search/search?searchterm=side+by+side+configuration&CurrentScope.ForumName=Windows&CurrentScope.filter=&askingquestion=false -
I get a message that says that the application has failed to start because its side-by-side configuration is incorrect. Check the log of events applications for more details. I used this link to email for 2 years and NOW I can't in my email and all my saved folders.
Hi KathyHendges,
1. What mail client do you use?
Step 1:
You can try clicking with the right button on the link and select run as administrator and check.
Step 2:
This error code can occur due to corrupted Microsoft Visual c++ installation.
To resolve this problem, you can install the latest version of visual C++ according to the version of Windows installed on your computer (32-bit or 64-bit) and check:
Download and install Microsoft visual C++ from the below mentioned link:
Package redistributable Microsoft Visual C++ 2010 (x 86)
Package redistributable Microsoft Visual C++ 2010 (x 64)
http://www.Microsoft.com/downloads/en/details.aspx?FamilyId=bd512d9e-43c8-4655-81bf-9350143d5867
For more information, you can consult the following link:
Hope this information is useful.
-
Recently, my laptop has problems. My user profile cannot be loaded and even when I do another profile most of my downloaded programs is a party. But anyway, it's a different matter.
Windows Live Messenger worked great after all this. I connected and everything was fine. But then Windows wanted an update.
Microsoft 2011 or something like that. At halfway through the installation of the blue screen of death came. My laptop turned on fine after that, but... Windows Live Messenger has come up with the error
Application has failed to start because the side by side configuration is incorrect
I tried to reinstall several times. The removal of all that is on the new Windows 2011. But no no no avail. I have now no other software in the package here. But the program for Windows Live Messenger file was still there. I deleted it. Installed Windows Live Messenger again but got the same error.
Anyone know what is happening?
Hello
I suggest that you post your question on the Forums of Windows Live for a better answer to this question. This is a dedicated forum for issues related to Windows Live Messenger
http://social.answers.Microsoft.com/forums/en-us/category/windowslive
You can also follow the troubleshooting below:
http://support.Microsoft.com/kb/940065
Hope the helps of information. Please post back and we do know.
-
GTA 4 has failed to start because its side-by-side configuration is incorrect
When I click on gtaIV.exe, the window indicates that the application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe for more details. (you can also see the image I have uploaded. help me please...)
This problem may have different bugs, according to the version.
What version of the game you are using, retail disk, steam or other?
Have you tried to reinstall the game?[EDIT: may 2014 - how to get it marked as an answer?] I had not even gotten around
telling the OP that we give advice to hackers.
[Mysterious...]
.
-
IPSec Tunnel upward, but not accessible from local networks
Hello
I have an ASA5520 and a Snapgear. The IPSec tunnel is in place and works very well. But I am not able to access the local LAN on both sides. Here are a few setups:
SH crypt isakmp his
Active SA: 1
Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 1
1 IKE Peer: 10.10.10.2
Type : L2L Role : responder
Rekey : no State : AM_ACTIVECrypto/isakmp:
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set pfs group1
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map outside_map interface outside
crypto map IPSECTEST_map0 1 match address IPSECTEST_cryptomap
crypto map IPSECTEST_map0 1 set peer 10.10.10.2
crypto map IPSECTEST_map0 1 set transform-set ESP-3DES-SHA
crypto map IPSECTEST_map0 1 set nat-t-disable
crypto map IPSECTEST_map0 1 set phase1-mode aggressive
crypto map IPSECTEST_map0 interface IPSECTEST
crypto isakmp enable outside
crypto isakmp enable IPSECTEST
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 3600Route SH:
C 172.16.3.0 255.255.255.0 is directly connected, VLAN10
C 10.10.10.0 255.255.255.0 is directly connected, IPSECTEST
C 192.168.112.0 255.255.254.0 is directly connected, insideaccess-list:
IPSECTEST_cryptomap list extended access allowed object-group DM_INLINE_PROTOCOL_1 172.16.3.0 255.255.255.0 object 172.20.20.0
and here's the scenario:
If I make a ping of the asa to the Remote LAN, I got this:
ciscoasa (config) # ping 172.20.20.1
Type to abort escape sequence.
Send 5, echoes ICMP 100 bytes to 10.172.20.20.1, wait time is 2 seconds:
No route to the host 172.20.20.1Success rate is 0% (0/1)
No idea what I lack?
Here's how to set up NAT ASA 8.3 exemption:
network object obj - 172.16.3.0
172.16.3.0 subnet 255.255.255.0network object obj - 172.20.20.0
172.20.20.0 subnet 255.255.255.0NAT (inside, outside) source static obj - 172.16.3.0 obj - 172.16.3.0 destination static obj - 172.20.20.0 obj - 172.20.20.0
Here's how it looks to the ASA 8.2 and below:
Inside_nat0_outbound to access extended list ip 172.16.3.0 allow 255.255.255.0 172.20.20.0 255.255.255.0
NAT (inside) 0-list of access Inside_nat0_outbound -
My Messenger was working normally, then I shut down my computer at lunch. In return, I turned it the Messenger wasn't working and this appeared:
"The application failed to start because its side-by-side configuration is incorrect. Check the log of events applications for more details"
Can someone help me to fix it? Thank you.
Hello
they will help you with your questions/problems Messenger when repost you the link below in the Messenger forums
-
Application has failed to start because it side-by-side configuration is incorrect.
Hi I have a problem with Windows messenger. I can open it even after I have updated to the latest version, I get the same error message stating: "the application failed to start because its side-by-side configuration is incorrect. Check the log of events applications for more details. "Any help on this?
Hi I have a problem with Windows messenger. I can open it even after I have updated to the latest version, I get the same error message stating: "the application failed to start because its side-by-side configuration is incorrect. Check the log of events applications for more details. "Any help on this?
Hey Nalsato
Here is the vista forums
Try the repost in the Messenger link below forums
http://www.windowslivehelp.com/product.aspx?ProductID=2
Walter, the time zone traveller
-
Hello world
I just got the new Sims 3, I installed and uninstalled several times, but every time I get the same message came 'the Launcher of the sims 3 has stopped working ".
I checked the updates, defragmentation and tried again but no joy. In addition, the system requirements exceeds the requirements of the game.
I spoke to someone on the EA forum and they suggested to the launcher and simply load the game, so I tried this and now I get "the application failed to start because its configuration side by side is incorrect. check the log of events applications for more information. »In all honesty doesn't mean a lot to me, I tried to get help from EA, but they do not respond, I hope experts can help me, it would be much appreciated.
EMHello Emma,
Thank you for posting. As a gamer, I have an idea of what might happen. It seems that the configuration file for the game is not correct or may be corrupt. Unfortunately only EA support for the Sims 3 can really help you with this problem. I suggest that you stay in control of their forums or contact their support team.
Using third-party software, including hardware drivers can cause serious problems that may prevent your computer from starting properly. Microsoft cannot guarantee that problems resulting from the use of third-party software can be solved. Software using third party is at your own risk.
Zack
Engineer Microsoft Support answers visit our Microsoft answers feedback Forum and let us know what you think. -
Hello
I can t open Google Earth or Microsoft Office programs because I get this message - the application could not start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe for more details.
A few days ago I could open all what programs. I put t know what is the problem.
I did sxstrace and that's what I have-
=================
Launch the activation context generation.
Input parameter:
Flags = 0
ProcessorArchitecture = Wow32
CultureFallBacks = en-US; en
ManifestPath = C:\Program Files (x 86) \Google\Google Earth\client\googleearth.exe
AssemblyDirectory = C:\Program Files (x 86) \Google\Google Earth\client\
Application configuration file =
-----------------
INFO: File analysis shows C:\Program Files (x 86) \Google\Google Earth\client\googleearth.exe.
INFO: Manifest definition identity is (null).
INFO: Reference: Microsoft.VC80.CRT, processorArchitecture = "x 86" publicKeyToken = "1fc8b3b9a1e18e3b", type = "win32", version = "8.0.50727.4053"
INFO: Resolving reference Microsoft.VC80.CRT, processorArchitecture = "x 86" publicKeyToken = "1fc8b3b9a1e18e3b", type = "win32", version = "8.0.50727.4053".
INFO: Resolving reference for ProcessorArchitecture WOW64.
INFO: Resolving reference for the neutral culture.
INFO: Application binding policy.
INFO: No found publisher policy.
INFO: No redirect political connection is found.
INFO: Start the detection of assembly.
INFO: Can't find the assembly in WinSxS.
NEWS: Try to detect manifest to C:\Windows\assembly\GAC_32\Microsoft.VC80.CRT\8.0.50727.4053__1fc8b3b9a1e18e3b\Microsoft.VC80.CRT.DLL.
INFO: Found no manifesto for the neutral culture.
INFO: End detection of assembly.
INFO: Resolving reference for ProcessorArchitecture x 86.
INFO: Resolving reference for the neutral culture.
INFO: Application binding policy.
NEWS: Control strategy of the Publisher C:\Windows\WinSxS\manifests\x86_policy.8.0.microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.5592_none_517247830f45081d.manifest
INFO: Start the detection of assembly.
INFO: End detection of assembly.
ERROR: Activation context generation failed.
End activation context generation.Help, please!
This type of error can be caused if the Visual C++ library runtime components are missing or because of a third-party software.
Follow the steps below:
Method 1:
If the problem is caused by the lack of Visual C++ libraries, you can download and install the Runtime components of Visual C++ libraries from the link below:
This error can occur when the Microsoft .NET Framework installation on the computer is damaged or is missing.Try it out below step to reinstall and repair installation of Microsoft .NET Framework on the computer, then check if you can install the software.
(a) click the Start button, select Control Panel, click programs and then click on 'Turn Windows has or not.' If you are prompted for an administrator password or a confirmation, type the password or provide confirmation.
(b) search for Microsoft .NET framework 3.5.1 uncheck, click OK and restart the computer.
(c) after the reboot, open again "Turn Windows features on or off" and place a check next to Microsoft .NET framework 3.5.1 and restart the computer.
Step 2
If the previous step fails, then I suggest that you manually download and install Microsoft Visual C++ 2005 and 2008 Redistributable Package and check to see if you can install the software.
In programs and features, you do not show that you have installed Microsoft Visual C++ 2005 Redistributable and Microsoft Visual C++ 2008 Redistributable? If this is not the case, download the links here.
Package redistributable Visual C++ 2005 (X 86)
http://www.Microsoft.com/downloads/en/details.aspx?FamilyId=32BC1BEE-A3F9-4C13-9C99-220B62A191EE&displaylang=en
Visual C++ 2005 (x 64) redistributable package manager
http://www.Microsoft.com/downloads/en/details.aspx?FamilyId=eb4ebe2d-33c0-4A47-9dd4-b9a6d7bd44da&displaylang=enPackage redistributable Microsoft Visual C++ 2008 (x 86)
http://www.Microsoft.com/downloads/en/details.aspx?FamilyId=9B2DA534-3E03-4391-8A4D-074B9F2BC1BF&displaylang=en
Package redistributable Visual C++ 2008 SP1 (x 64)
http://www.Microsoft.com/downloads/en/details.aspx?FamilyId=BA9257CA-337F-4B40-8C14-157CFDFFEE4E&displaylang=enI hope this helps.
-
I am using Cyberlink PowerDirector 9 and the above message keeps popping up. Help?
Hello
Thanks for posting your question in the Microsoft Community!
The problem may occur if your computer does not have the correct C++ runtime components for your system type. (X 86 or x 64).
We will try the following methods and check the result.
Method 1:
Install the latest Microsoft Visual C++ has helped users fixing the issue.
Later supported Visual C++ downloads
http://support.Microsoft.com/kb/2019667
Method 2:
You can also try uninstalling and reinstalling Cyberlink PowerDirector 9 to check if that helps:
For more information, see the following link:
Uninstall or change a program
http://Windows.Microsoft.com/en-us/Windows7/uninstall-or-change-a-program
For more details on this topic, see the event log using Event Viewer. Please see the link below for more information on how to use Event Viewer to check the error message or information:
http://Windows.Microsoft.com/en-us/Windows7/what-information-appears-in-event-logs-Event-Viewer
Please check the information in Event Viewer and let us know the question briefly to provide you with a better solution.
I hope that helps!
If the problem persists, or you need help on Windows please keep us informed.
We are here to help.
-
Application has failed to start because the side by side configuration is incorrect
I get "the application could not start because the side by side configuration is incorrect, please see the application event log or use the command-line sxstrace.exe for details" whenever I try to open Microsoft Flight Simulator. What can be done to fix this?
Check THIS link-
If these C++ installations do not help you may need another version.
I have 16 different C++ Redistributable on my machine, starting with six of ' 05.
Don't know if they are all necessary. Various software was installed.If you have a 64 bit OS, you get X 86 and 64-bit versions.
.
-
Help: Adding to the IPsec Tunnel encryption field Questions
Good evening everyone,
I'm looking for help and/or advise in what concerns adding more networking in the field of encryption of an existing IPsec site-to-site tunnel. Both sides of the tunnel are of ASA. The client on the remote end is eager to access the networks more on my end. They have already updated their ACL crypto map to include the new networks. When they perform "show crypto IPsec his counterpart x.x.x.x" it shows already encap packets attempting to join my network.
On my side, I updated my ACL crypto map to reference the new 2 networks, created the double NAT and added the ACL needed to allow the inbound access through ports they want. When I perform a 'see the crypto IPsec his counterpart x.x.x.x' output is NOT up-to-date with the new networks added to the field of encryption. When I run a tracer of package of supply of one of the servers in the new network, the traffic is translated as he should, but a fall when it hits the outgoing interface for the VPN tunnel.
Am I missing something here? Can I bounce the tunnel so that the new networks must be recognized in the surveillance society?
Thanks in advance.
Hello
You must bounce the tunnel when you change the interesting traffic, otherwise the new SA will not be created, is a little funny that you say that SA is already build on the remote side, SA cannot be established only on one side, is like building a new tunnel, if you don't have it on one side, it can not simply prevail and create the entry of SA. In addition, adding new networks and bounce the tunnel you need to generate traffic to trigger the ITS new or you will never see that it created. Check your no nats and routing and it should work.
Best regards, please rate.
Maybe you are looking for
-
Cannot change the iCloud on iPhone because of old deleted email accounts
Hello. The problem is that I made my account iCloud with an old email, which has now been deleted. I have an iCloud account (where I am writing), but I can't log out from my iPhone, because I don't remember the password. The password cannot be retrie
-
I stopped my backup to Midway and only half of my pictures was reinstated.
I stopped my backup to halfway through because he was taking too much time. I've only got about 1/3 of my pictures downloaded. Is it possible for me to download the rest of the photos that I'm missing without having to load this particular back again
-
Why date on the email received in my Inbox is not the same as reading mail?
original title: E-mail Internet Explorer When I get a grateful e-mail that was read, the date on the e-mail received in my Inbox is different is up-to-date. However, the e-mail message when it has been read is not the same. Why is it so? Thank you, D
-
How can I change the setting in the administrator with the password in Windows XP?
How can I parameter string in the admin with the password in windows xp professional
-
New Nividia Grapics card and new power supply which will work on 500-199
I want to run most of the high quality games! My budget is $ 200 thank you!