Sa timing: remaining key lifetime (kB/sec): (4374000/28693)Ĭrypto map outside_map 4 match address outside_4_cryptomapĬrypto map outside_map 4 set peer 1.1.1. Slot: 0, conn_id: 7069696, crypto-map: outside_map
Transform: esp-aes esp-sha-hmac no compression Contents 1 Introduction 2 DPD on routers 3 DPD on ASA 4 DPD in IPSec VPN Client 4.8 - 5.
Palo alto networks vpn deleting possible stale phase 1 series#
Path mtu 1500, ipsec overhead 74, media mtu 1500 All information is based on a series of tests and provided 'AS IS' without warranty of any kind. #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0 #pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0 #pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0 #pkts compressed: 0, #pkts decompressed: 0 #pkts decaps: 46, #pkts decrypt: 46, #pkts verify: 46 #pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0 Phase 2 is working but not working i can recieve data but i cant send out any dataĬrypto map tag: outside_map, seq num: 4, local addr: 2.2.2.2Īccess-list outside_4_cryptomap extended permit ip 10.48.0.0 255.255.252.0 10.20.0.0 255.255.0.0 In ASDM i created a new tunnel with the new ip address same local and remote groups and same group policy same filter instant the phase 1 is complete I restore the old tunnel back to pervouis config and add a new tunnel config
So i went back to crypto maps peer setting i added the old ip address back in thereĭid not work, i could not get phase 1 to work at all When i check the connection profiles the old connection disappear Remove the old IP address and add the new IP address We used the same tunnel that is working and change the Peer Setting Ok, here a updated on the problem i am havingĬonfiguration > Site-to-Site VPN > Advanced > Crypto Maps
0 kommentar(er)
