Solved

Site to site VPN

Posted on 2007-11-29
2
597 Views
Last Modified: 2008-10-14
I am setting up a test with 2 windows xp pcs and 2 Cisco ASA 5510 appliances. I have the 2 ASA devices connected togethe via ethernet and the 2 windows pcs are plugged directly into the respective ASA firewalls.

I should be able to ping the remote PC and get a reply, but it doesnt seem to be working. Followed the wizard, the only thing I can think of is that the device didnt come with a liscense for VPN.
0
Comment
Question by:dwarner8
2 Comments
 
LVL 28

Accepted Solution

by:
batry_boy earned 250 total points
ID: 20374798
The ASA comes with VPN functionality built in, both for remote access and site-to-site VPN capability...no special licensing required.

Have you verified that the VPN tunnel is up?  From the command line interface, you can issue the command:

sh cryp is sa

and it will say something similar to the following if the tunnel is up:

1   IKE Peer: xxx.xxx.xxx.xxx
    Type    : user            Role    : responder
    Rekey   : no              State   : MM_ACTIVE
2   IKE Peer: xxx.xxx.xxx.xxx
    Type    : user            Role    : responder
    Rekey   : no              State   : MM_ACTIVE

If the tunnel is up, then you should be able to ping the other client PC as long as the crypto access list is correct.  Post the output of both the following commands to further troubleshoot:

sh cryp is sa
sh cryp ip sa
0
 
LVL 1

Author Comment

by:dwarner8
ID: 21323552
THanks
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Business Broadband for Small Office in Dubai 2 87
AVAYA IP Office DHCP Configuration Over a Sonicwal VPN 4 77
Support licences 3 26
Failover VPN Question Sonicwall 5 48
I recently had the displeasure of buying a new firewall at one of the buildings I play Sys Admin at. I had to get a better firewall than the cheap one that I had there since I was reconnecting the main office to the satellite office via point-to-poi…
Occasionally, we encounter connectivity issues that appear to be isolated to cable internet service.  The issues we typically encountered were reset errors within Internet Explorer when accessing web sites or continually dropped or failing VPN conne…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question