1

Site to site VPN between 2x ASA 5505 (8.4) not working

view story
linux-howto

http://serverfault.com – I have 2 cisco asa's 5505 running 8.42. All is working fine (using NAT), but I cant get a site to site VPN to work. I used the wizard in the ASDM all with default settings (except for the peer adresses / PSK / local/remote networks off course). When I send a ping to the other ASA, the tunnel wont come up. I found some posts on the internet mentioning that a NAT exempt has to be made, so I checked the box for this in the asdm wizard (using the option "inside" for it). Still no results. Please help : Saved : ASA Version 8.4(2) ! names <<NOT NEEDED>> ! interface Ethernet0/0 switc ()

dayu's picture
Submitted by dayu on 08/29/2012

Stories similar to Site to site VPN between 2x ASA 5505 (8.4) not working

Site2Site tunnel via SSL VPN? 19 weeks 16 hours ago

i have tried convincing my opposite office of the tunnel in question to get site-2-site ipsec up and running.

However they are not really into that and run everything via SSL VPN..

Is it possible to create a site to site tunnel via SSL VPN?

How i would setup the ipsec on our Cisco ASA 5505

local net 192.168.0.0/18 remote net 10.50.0.0/18 IKE proposal pre-share-3des-sha, pre-share-aes-256-sha I

i'm currently building a s2s VPN using 2 pfsense appliances (2.0.2).

I'm completely lost as to how to why this doesn't work. I can't ping, much less reach resources on the other side.

Got a T1-internet connection with a Cisco ASA 5510 appliance in our small office.

We have a site-to-site vpn connection from our office to a remote data center.

Question(s):

1) How can I find out if my site-to-site vpn traffic is being saturated via the Cisco ADSM?

2) Are there other simple/free tools that can show me if my site-to-site vpn connection is being saturated?

Thank-you!

I am trying to set up an ipsec tunnel between our ASA 5505 and a Juniper ssg5. The tunnel is up and running, but I cannot get any data through it.

The local network I am on is 172.16.1.0 and the remote is 192.168.70.0. But I cannot ping anything on their netowork. I receive a "Phase 2 OK" when I set up the ipsec.

I think this is the part of the config that is applicable.

I have a situation whereby there are 3 sites.

Site a - User site Site b - User site Site c - datacentre

Site a can talk to site c fine Site b can not talk to everything in site C

In particular, workstations in site b are struggling to communicate properly with site c.

I have been having this problem accessing certain sites (one of which is mozilla.org).

In short, a tcp connection is established, but after that, all packets coming back from the remote site are dropped by the firewall - a Cisco PIX 515.

I have migrated a site from a external Linux server to a new IIS server. DNS settings have been updated and are showing correctly in whois, squish.net, traceroute. However, when I type in the domain, I am still looking at the old site on desktop. Mobile version via cell (not LAN) is pointing to new site.

ASA 5540 Enable Password Issue 42 weeks 3 days ago

I have a Cisco ASA 5540 running the following Software/Manager version:

Cisco Adaptive Security Appliance Software Version 8.2(2)17 Device Manager Version 6.3(2)

I use ASDM to make changes to the firewall on a constant basis with no issues.