<div>
Are you successful past both Phase 1 and Phase 2 of the negotiation?<br />
Are your access lists for the crypto statements identical (except reversed) for both locations?<br />
<br />
sh crypto isakmp sa detail<br />
sh crypto ipsec sa detail<br />
<br />
post the access lists for the crypto statements for both locations.
</div>


Are you successful past both Phase 1 and Phase 2 of the negotiation?
Are your access lists for the crypto statements identical (except reversed) for both locations?

sh crypto isakmp sa detail
sh crypto ipsec sa detail

post the access lists for the crypto statements for both locations.

<div>
<div class="content wysiwyg-content">
Hi,<br />
<br />
I am troubleshooting a VPN Tunnel that was working between a Cisco ASA and a Cisco Router.<br />
<br />
Attached is the log from the ASA<br />
<br />
What does this mean?<br />
<br />
I know my PSK is correct.<br />
<br />
Thanks,<br />
Mitchell<br />
<a href="https://filedb.experts-exchange.com/incoming/2008/06_w26/35640/log.txt" target="_blank" class="file-inline" title="log file from ASA (712 bytes)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>log.txt</a>
</div>
</div>


log.txt

Hi,

I am troubleshooting a VPN Tunnel that was working between a Cisco ASA and a Cisco Router.

Attached is the log from the ASA

What does this mean?

I know my PSK is correct.

Thanks,
Mitchell

Cisco ASA VPN

A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.

Internet Protocol Security (IPsec) is a protocol suite for secure Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. IPsec can be used in protecting data flows between a pair of hosts (host-to-host), between a pair of security gateways (network-to-network), or between a security gateway and a host (network-to-host). IPsec is an end-to-end security scheme operating in the Internet Layer of the Internet Protocol Suite.

Internet Protocol Security

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.