Re: ASA Site to Site IP Sec tunnel problem

Hi All,

I've added "Sysopt connection permit-vpn" to both sides.

I have the following debug:

        asa2# sh debug
        debug crypto ipsec enabled at level 1
        debug crypto isakmp enabled at level 1
I try to ping the remote side loopback
       asa2# ping 20.0.0.1
      Type escape sequence to abort.
     Sending 5, 100-byte ICMP Echos to 20.0.0.1, timeout is 2 seconds:
     ?????
     Success rate is 0 percent (0/5)

I check the crypto:

       asa2# sh crypto isakmp sa
       There are no isakmp sas

Is there any other debug I could enable. I've got a feeling something makor
is missing but can't put my finger on it.

Rgds
D.

Blogs and organic groups at http://www.ccie.net
Received on Fri Sep 30 2011 - 09:51:57 ART