Link to home
Start Free TrialLog in
Avatar of WERAracer
WERAracerFlag for United States of America

asked on

IPSEC question (making us the initiator, not responder)

We have an issue with one of our IPSEC sites.  If I want a tunnel up, I cannot get it up from the IPSEC site. It has to be intiaited from the head end. Is there anyway to configure the VPN so that either side can bring up the tunnel? This is a Cisco IPSEC tunnel between two ASAs


crypto map mymap 37 match address ipsec
crypto map mymap 37 set peer <ip hidden>
crypto map mymap 37 set transform-set aes128
crypto map mymap interface outside

crypto isakmp enable outside
crypto isakmp policy 50
 authentication pre-share
 encryption aes-256
 hash sha
 group 2
 lifetime 86400
ASKER CERTIFIED SOLUTION
Avatar of gavving
gavving
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of WERAracer

ASKER

the masks are definitely the same. I would get a QM FSM error if they were not. Maybe a bug? One side is a 515e, the other ASA5505. I opened a tac case
bug in 8.05!