Need help with ikev1 VPN site-to-site

Hi guys,.

I have 2 asa 5505, the two 8.4 (4) running with ASDM 6.4 (9).

I rebuild the config probalby 6 times now, with no clue what I am doing wrong.

My main gig is, why the asa are not same initiator VPN negiotiation, no traffic at all.

OK, I can ping both devices on their external interfaces.

IKEv1 is enabled on the external interfaces.

I checked the connection profile, group of tunnel, cryptographic cards, IKE strategies, etc.

Always nothing less newspapers, which would indicate any attempt of negotiation.

Help, please!

Hello

Well, that really depends on your configuration. For the most amount of networking to each site using the VPN L2L.

But generally you can configure with

object-group, LAN

network-object

object-group, REMOTE network

network-object

Destination LOCAL LOCAL Shared source (indoor, outdoor) NAT static REMOTE

Naturally, the names of "object-group" can be different and your interfaces cannot be named 'inside' and 'outside'

-Jouni

Tags: Cisco Security

Similar Questions

  • Need help with Config VPN on ASA5505

    Our client has a seller who needs to establish a VPN tunnel to their own router that sits behind our firewall.

    Concentrator VPN (seller) ASA5505 customer (7.2) <------> <------->3750 Switch <------->VPN router (Vendor)

    Here is the implementation of information:

    ASA outside Interface - 208.64.1x.x4 DG - 208.64.1x.x3

    ASA inside the Interface - 172.20.58.13/30

    3750 switch Interface connected to ASA - DG - 172.20.58.13 and 172.20.58.14/30

    3750 switch Interface connected to router VPN - 172.20.58.21

    The Interface of the VPN router connected to the 3750 - 172.20.58.22/30 DG - 172.20.58.21

    I have also attached a Visio for that and the current configuration of execution of ASA and 3750. We have no access to the router VPN TNS.

    Our responsibility is to everything just to make sure that the tunnel rises.

    You kindly help me with this?

    Here is what I intend to do:

    (1) create a static NAT on the ASA Public Private IP Address of the VPN router

    Public - 208.64.1x.x5 / 28

    Private - 172.20.58.21 / 30

    Will be the ASA automatically ARP for this address or do we I have to configure another interface on the ASA with this public IP address?

    (2) what would the access on the ASA list?

    (3) the customer gave us some config to copy the stuff on the SAA so that they can create the tunnel but I couldn't put these commands in the SAA. How this would apply and which interface?

    Access to firewall: the information below is about access between the VPN router and the

    VPN concentrator. If a firewall/router is present in front of the VPN services must be

    permit:

    allow a host 208.224.x.x esp

    allow a host 208.224.x.x gre

    permit any isakmp udp host 208.224.x.x eq

    permit any eq non500-isakmp udp host 208.224.x.x

    allow a host 204.8.x.x esp

    allow a host 204.8.x.x gre

    permit any isakmp udp host 204.8.x.x eq

    permit any eq non500-isakmp udp host 204.8.x.x

    permit tcp 206.x.x.0 0.0.0.255 any eq 22

    permit tcp 206.x.x.0 0.0.0.255 any eq telnet

    allow a udp host 208.224.x.x

    allow a udp host 208.224.x.x

    Can someone help me with the commands I need to run it on the ASA? The 5505 running 7.2 code (4).

    Thanks in advance.

    HS

    Your steps are correct, you need to configure static NAT and the list of access to allow access.

    Static NAT would be as follows:

    static (inside, outside) 208.64.1x.x5 172.20.58.21 netmask 255.255.255.255

    You also need a road inside interface-oriented join 172.20.58.21:

    Route inside 172.20.58.21 255.255.255.255 172.20.58.14

    You have already access list on the external interface? If you have, then just add in the existing access list, if you don't have it, and then add the following:

    access list outside-acl permit udp any host 208.64.1x.x5 eq 500

    access list outside-acl permit udp any host 208.64.1x.x5 eq 4500

    access list outside-acl allow esp any host 208.64.1x.x5

    Access-group acl outside in external interface

    If you also have an inside interface access list, you must also allow passing traffic by as follows:

    access-list allow host 172.20.58.21 udp any eq 500

    access-list allow host 172.20.58.21 udp any eq 4500

    access-list allow host esp 172.20.58.21 all

    If you have not had any access inside the interface list, then you don't need to configure it.

    Hope that helps.

  • Need help with native VPN client for Mac to the Configuration of the VPN router RV082

    Guys,

    I am trying to set up router RV082 VPN Client with native Mac for my remote access. However, no matter what I did, I'm not able to make works. Can any give me an example of how to set my router RV082 and Mac Book Pro (Mountain Lion)?

    Thank you

    Hi Jixian, the native client MAC does not work. The IPSEC VPN client is the same as the 5.x Cisco VPN client is not supported on this device.

    Your alternatives are to use PPTP or a 3rd party IPsec client such as ipsecuritas.

    -Tom
    Please evaluate the useful messages

  • Need help with configuration on cisco vpn client settings 1941

    Hey all,.

    I just bought a new router 1941 SRI and need help with the configuration of the parameters of the VPN client. Orders aspect a little different here, as I'm used to the configuration of ASA and PIX for vpn, routers not...

    If anyone can help with orders?

    I need the installation:

    user names, authentication group etc.

    Thank you!

    Take a peek inside has the below examples of config - everything you need: -.

    http://www.Cisco.com/en/us/products/ps5854/prod_configuration_examples_list.html

    HTH >

    Andrew.

  • I'm suddenly needing help with my browser Firefox (6.0.2)

    Hello
    I'm suddenly needing help with my browser Firefox (6.0.2)

    (OS: I use Windows XP).

    When I open the browser, I don't see is a totally white screen of white, with all the toolbars at the top.

    I know that my physical connections are very good: I have tested the modem, turned the pc market etc and I can also receive/send emails.

    This problem started today, September 8, 2011 and has never happened before.

    Is it a coincidence that Firefox itself to day before I disconnected yesterday evening? Could this be something to do with this particular new update?

    I also noticed that just before I "opened" Firefox, I now get a small box indicating:

    [JAVASCRIPT APPLICATION]
    Handl exc in Ev: TypeError: this oRoot.enable is not a function

    This never appeared before - I hope that it offers a clue has what is wrong.

    The browser not be stuck in Mode safe, said by the way.

    Of course, I can't find solutions to the problem on the internet, I don't physically see all Web sites!
    (A friend sends this request in my name from their pc)

    Any light you can throw on this problem of confusion would be much appreciated. I'd rather not have to uninstall and reinstall Firefox if possible.

    If the only option is to uninstall Firefox and reinstall from your site, I'm also in trouble (I can not see the internet or download).
    In this case, would you be able to send the .exe file as an attachment to my e-mail address? In the affirmative, please let me know and I'll give you more details.

    Thanks in advance.

    One possible cause is security software (firewall) that blocks or limits Firefox or plugin-container process without informing you, possibly after the detection of changes (update) for the Firefox program.

    Delete all rules for Firefox in the list of permissions in the firewall and leave your firewall again ask permission to get full unlimited access to the internet for Firefox and the plugin-container and the update process.

    See:

    Start Firefox in Firefox to solve the issues in Safe Mode to check if one of the extensions of the origin of the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > appearance/themes).

  • Need help with following error Message: ERROR of OPENING WET7CABLE. LOG FILE on my Windows XP laptop

    Please need help with an Error Message on my cell phone. The message is as follows: ERROR of OPENING WET7CABLE. LOG FILE

    This message came after running a disk that was provided by Belkin cable easy transfer (FU279) on my old laptop with Windows XP Home Edition you are trying to transfer my files from my old computer laptop w/Win XP on a new computer laptop w/Win 7. This record is for the Windows XP upgrade to Windows 7 and transfer the files.

    I want to thank all in advance for your answers.

    Nelson Santiago

    Hi NELSONSANTIAGO,

    1. when exactly you receive the error message?

    2. is the Belkin easy transfer cable recognized by the Windows XP computer?

    This file may be located on the Belkin Easy Transfer Cable installation disc.

    For more information on how to use or configure the Belkin Easy Transfer cable in Windows XP, see the link below the manual on the Belkin site and check if that helps.

    http://en-UK-support.Belkin.com/app/product/detail/p/4825

  • Need help with my Mail window. I can't export my message to the PST format. I keep getting the message error "an error occurred during initialization of MAPI".

    Hello

    Need help with my Mail window. I can't export my message to the PST format. I keep getting the message error "an error occurred during initialization of MAPI". Y at - it solution or another method?

    Hi ErikLee,

    Do you have MS Outlook installed on your computer?

    Windows mail import and export opportunities are limited to an Outlook .pst file or an Exchange Server mailbox. They are available only if MS Outlook is installed.
    If MS Outlook is not installed and you start an import or export action, the necessary support files are not present for Windows mail complete the operation. Then I suggest you to install Outlook temporarily and see if the problem is resolved.

    Follow the instructions below and check if the problem is resolved.

    1. reboot your computer, and then start Windows Mail.
    2. on the Tools menu, click Options.
    3. in the connection tab, click on edit to open the Internet Properties dialog box.
    4. in the tab programs, click on an application other than Windows mail e-mail in the e-mail list. Click on apply and then click OK.
    5. click OK again to close the Options dialog box.
    6. exit Windows mail and restart Windows mail.

    If this does not work, I suggest you upgrade to Windows Live Mail to import or export messages that may help you resolve the issue.

    To download Windows Live Mail, visit the following Microsoft Web site:
    http://get.live.com/wlmail/overview

    For more information about Windows Live Mail, see the Microsoft Web site at the following address:
    http://windowshelp.Microsoft.com/Windows/en-us/help/4b30d3d6-abe2-46d1-a5fd-4a1ba786a1381033.mspx

    Check whether the problem is resolved.

    Please post back and let us know if it helped to solve your problem.

    Kind regards
    KarthiK TP

  • Need help with the settings of the firewall for Firefox

    My wireless connection is fine, but all of a sudden my mozilla firefox browser cannot connect to Web sites. I can connect using another browser. Looks like I need to change the firewall settings, but I don't know how. How can I distribute my browser to work again? Don't know what happened to start blocking it, but it just happened some time this morning.

    Hi Tara,

    You can check the link and follow the steps and check if this may help;

    Configure the firewall so that Firefox can access the Internet

    http://support.Mozilla.org/en-us/KB/configure-firewalls-so-Firefox-can-access-Internet

    Is has problems, I suggest you to contact the Mozilla Firefox support,.

    http://support.Mozilla.org/en-us/products/Firefox

    If you need help with Windows, please do not hesitate to post. We will be happy to help you.

  • Need help with the data storage store, local array and network connections

    Need help with my ESXi 4.1 installation

    My hardware:

    I built a server with an Asus P6T whitebox, i7 920, 12 Gig RAM, NIC, Intel Pro1000 PT Quad, 3ware 9650SE-12ML with 8 1.5 TB SATA green in a raid 6 array gives me about 8 + TB with a spare drive all housed within a NORCO RPC-4220 4U Rackmount Server chassis.  I also have a 500 GB SATA drive which will hold the ESXi and virtual machines.

    The network includes a firewall, Netgear Prosafe FVS336G, GS724Tv of Netgear ProSafe 24 port Gigabit Managed Switch on a dhcp cable modem internet service provider.

    I also have 2 old NetGear SC101T NAS disks (4to) I want to connect to the system how some - at a later date have... data on them and want to transfer to the new storage array. I always looking into the question of whether they will work with ESXi 4.1, or I might have to only access it through Windows XP.

    My Situation:

    I have already installed ESXi 4.1 and vsphere client with no problems and it is connected to a dhcp cable internet service.  I've set up host via a dynamic DNS service name give me a static hostname on the internet.  I installed three machines to virtual OS successfully at the moment and now want to first start by creating a multimedia storage server which will use some of this new 8 TB array, then separate data storage for use with a web server small overhead storage and a backup.  It is a domestic installation.

    Help with the data store and network:

    I was doing some reading, because I'm new to this, and it looks like I'll probably want to set up my table via ESXi as a nfs disk format.  Now, the data store is usually in another physical box from what I understand, but I put my readers and ESXi all in the same box.  I'm not sure that the best way to put in place with grouped network cards, but I want to make this work.

    I understand that in ESXi 4.1 using iSCSi LUN must be less than 2 TB, but nfs - I should be able to add a bigger partition then 2 TB (for my multimedia) in nfs, right? or should I still add it separately as a separate 2 TB drives and then extend them to get the biggest space.

    Any suggestions or direct resources showing examples on how to actually add some parts of the table as data warehouses separate nfs.  I know that to go to the configuration tab, and then select Add to storage, and then select nfs. I have not my picture, but it's here that I don't know what to do because ESXi 4.1 system already has an address, should I put the same thing to the new data store array also (will it work?), and what should I use for the name of the folder and the store of data... just do something to the top.  I thought to later install Openfiler (for a multimedia storage using this table server) as a virtual machine, use the table with esxi so that I can access the same storage space with widows and linux-based systems.

    I also know I have to find a way to better use my quad nic card... put in place of virtual switches, grouping, etc HELP?

    Any direction, assistance, similar facilities to sample, suggestions or resources that would help would be great. I did a lot of hunting, but still a little confused on how to best to put in place.

    You must think of VMDK files of large databases with records of random size guest go read some data (a DLL or an INI file), maybe write some data back, then go read other data. Some files are tiny, but certain DLLs are several megabytes. It's random i/o all and heavy on the search time. IO Opsys is small random operations that are often sequential (go read data, write data, go read other data,...) so that deadlines are critical to the overall performance. That's why people say OPS are / s of reference and forget the MBs flow. The only time where you bulk transfers are when you read media (ISO files).

    Well, now forget all this. Actually the disk activity will depend on the specific applications (database? mail server? machines compiler?), but the above is true for boots, and whenever applications are idle. You should see the profile to know.

    RAID 10 is faster (and often more reliable) than RAID 5 or RAID-6 except in certain specific cases. In General RAID 10 is ideal for many random writes, since the calculation of parity for RAID-5 and - 6 adds to the overall latency between command and response - latency is cumulative if a little slow here and a little slow it adds up to a lot of overall slow synchronous especially with e/s on a network. OTOH RAID-5 and -6 can produce faster readings due to the number of heads, so you can use it for virtual machines that transfer bulk. Test. You may find that you need several different types subdashboards for best results.

    You said 3ware, they have some good grades on their site, but don't believe it. With my 9650 that I found myself with only a couple of their recommendations-, I put the (simple) table for allocation size 256 k, nr_requests at 2 x the queue_depth and use the planner date limit. I had the habit for the Ext4 file system formatted with stride and stripe-width synced to the table and used the options large_files with fewer inodes (do not use the huge_files option unless you plan to have single VMDK files in the terabyte range). Use a cache of great reading in advance.

    Virtual machines use VMDK files in all cases except raw iSCSI LUN that they treat native disks. VMDK is easier to manage - you can make a backup by copying the file, you can move it to a PC and load it into another flavour of VMware, etc. There could be some features iSCSI to your San as a transparent migration but nothing for me. NFS has less chatter of Protocol if latency lower times to complete an operation. NFS is good to read and write a block of data, that's all it boils down to.

    UPS is good, but it won't help if something inside the machine explodes (UPS does nothing if the PC power supply goes down). If the RAID card has an option for a battery backup module, so it can contain some writings in memory and may end up the disk i/o after replacing the power supply. 3ware also limits the types of caching available if help is not installed, and you get just the right numbers with the module.

  • need help with the mac version of PES

    need help with the mac version of PES

    If you follow the 7 steps you can dl a trial via the links here: http://prodesigntools.com/tag/ddl

    and activate it with your serial number.

    If you have a problem dl'g, you don't follow all 7 steps.  the most common mistake is not meticulously follow the steps 1, 2, and/or 3 (which adds a cookie to your system, allowing you to download the correct version of the adobe.com site).

    p.s. If you need a more direct link, you must specify the exact version you want.

  • Need help with google ranking

    If I want to watch my site ive created in google is to see this:

    Woning huren in Paramaribo, Suriname

    hureninparamaribo.nl /.

    U good bij ons een in Suriname hurenvakantiehuis. Deze woning is good in room Paramaribocentrum van het. Of woning is een rüstige wijk good ...

    UU has said een + 1 belangrijkste

    As you can see before the URL is no WWW. When I click on the link, the only thing I see is a small form.  Y at - there someone who can tell me where I can change this?

    Kind regards Brian

    Great! Thank you..

    Date: Wednesday, May 9, 2012 06:15:57-0600

    From: [email protected]

    To: [email protected]

    Topic: Need help with google ranking

    Re: Need help with google ranking

    created by Ken Binney in Dreamweaver - discover complete discussion

    Hello, Brian - the problem is the file extension, you use on your pages in the folder root of your remote site you have a page with only a form named:http://www.hureninparamaribo.nl/index.html and you have this other page with all your content named:http://www.hureninparamaribo.nl/index.htm your server displays the html file then delete the index.html page form rename the index.html page content

    Replies to this message received to everyone subscribed to this topic, not directly to the person who posted the message. To post a reply, or reply to this email or visit the message page: http://forums.adobe.com/message/4390439#4390439

    To unsubscribe from this thread, please visit the page message to http://forums.adobe.com/message/4390439#4390439. In the Actions box to the right, click on stop Notifications by e-mail.

    Start a new discussion in Dreamweaver, by e-mail or at the Adobe Forums

    For more information on maintaining your email forum notifications please go to http://forums.adobe.com/message/2936746#2936746.

  • Need help with Dreamweaver Divs

    http://i707.photobucket.com/albums/ww71/killster17/help-1.jpg?t=1295224397
    This is a clip of my site that I do, is not yet online.
    But what I need help with the div, as you can see the div with the blue text overlaps a Fireworks html banner I made.
    Anyway I can fix this so that the Fireworks banner goes over the div instead of the other way around?
    Any help is thanked!

    It is a problem with the stacking order.  Your division of the blue text takes precedence over your menus rollover.

    Please read on z-index.

    http://www.smashingmagazine.com/2009/09/15/the-z-index-CSS-property-a-comprehensive-look/

    For answers, we need a link to the page to test your site.

    Nancy O.
    ALT-Web Design & Publishing
    Web | Graphics | Print | Media specialists
    http://ALT-Web.com/
    http://Twitter.com/ALTWEB

  • Need help with moving around images

    I need help with moving images and images around the dreamweaver document window. My brother gave me his computer witch a dreamweaver MX (it is in Irag) so I can start building my own construction sites. I went to borders and bought a book on dreamweaver MX. Here's where I'm having a problem with: when ever I bring an image in the document window, I can't move the image around the document window. The book says "place the insertion point where you want the image to appear" but there is no insertion point. There is just a straight line as if I am trying to type something. It's almost as if I'm in microsoft word. If I take the mouse on the image, and then left click and try to drag the image to the location I want, it does not move. Can someone please help me with this problem. Thanks Jical

    Thank you for the answer to my question. This was really helpful.
    Jical

  • I need help with the control of two .swf in third.

    Hi, thanks for reading!

    I need help with the control of two .swf in third.

    I have a problem when I need to use a .swf in a digital signage solution, but were advised by the Legal Department, it cannot be changed in any way, I can not also have the source file blah blah blah. I pulled the .swfs on their site and I decompiled to see what I was up against.

    The main SWF that I need control is HCIC.swf and the problem is that it starts with a preloader, which, after the loading stops on a framework that requires user input to (button) on a play button, until the film will proceed and replay.

    What I've done so far is to create a SWF container, HCIC_container.swf, which will serve as a target for the HCIC.swf and I would like to send actionscript in the file, I am not allowed to edit.

    I managed to get done with help from someone on another forum. It is my hope that the following script just start HCIC.swf a framework after the preloader and button play and just play through.

    var container: MovieClip = createEmptyMovieClip ("container", getNextHighestDepth());
    var mcLoader:MovieClipLoader = new MovieClipLoader();
    mcLoader.addListener (this);
    mcLoader.loadClip ("MCIC.swf", container);

    function onLoadInit(mc:MovieClip) {}
    mc.gotoAndPlay (14);
    }

    But unfortunately it does not solve my problem. Because there is a media - controller.swf, which is charged by HCIC.swf who has orders, including the play button to start HCIC.swf.

    Here is a link to a .zip with all 3 files .swf file and all 3 .fla files.

    http://www.axiscc.com/temp/HCIC.zip

    What I have to do is to automatically start the HCIC.swf file, bypassing the pre-loader and play button without having to edit it or in the media - controller.swf in any case. Thus, all scripts must be done in HCIC_container.swf.

    I know it is confusing and it is difficult to explain, but if you look at the files it must make sense.

    ActionScripting is far from my point hard, so I'm definitely over my head here.

    Thanks for your help.

    Got my solution on another forum.

    http://www.ActionScript.org/forums/showthread.php3?t=146827

  • need help with spacing in Dreamweaver

    Hi I need help I did a site in Dreamweaver using a box format. I never did, but I have a gap between my header and navigation bar that I just can't close. What should I do?

    By default, browsers add their own margins and padding to HTML elements.  Many people use a CSS Reset to remove this default spacing, then add their own values to the different CSS selectors.

    This quick and dirty reset uses an asterisk (*) as a wildcard selector.  This removes the default margins and padding of all:

    CSS:

    * {margin: 0; padding: 0}

    Other methods of Reset CSS:

    http://cssresetr.com/

    Nancy O.

Maybe you are looking for

  • iCloud storage order

    The order of my iCloud storage levy is currently on my credit card. When this card was stolen about two months ago and replaced by a new credit card, the debit order was automatically stopped. To avoid this problem in the future is - not possible for

  • How to find the audio driver for HP sleekbook

    Can not find the audio driver for my HP laptop... I bought the new elegant book, model no HP. Elegant Pavilion book 15th-b001After 2-3 months, I found my laptop speakers weren't working and its got very slow. I couldn't do so I kept using headphones.

  • VISA RS232 read gel-&gt; LV stuck on "reset vi"-&gt; VISA resource inaccessi

    I have a simple vi (attached) that reads from a serial port (in fact, a USB to Serial converter) in a timed loop (in case you're wondering why the vi is written the way it is, the instrument that I'm reading sends status messages every 20 ms, but I w

  • Find DML in an uncertain transaction

    HelloIs it possible to find what a transaction uncertain, enumerated in dba_2pc_pending, is underway, I mean, the current sql statement?Thank youIgor.

  • CC 2015 Illustrator will not open

    Illustrator works well before lunch and after lunch, that it does not open suddenly. I did all the updates to my computer, everything checked all of the updates from Adobe, restarted. Illustrator doesn't let me open in safe mode. I tried to uninstall