asked on vpn issue
i was able to successfully create a site to site between asa5506 and tp-link r600vpn, however, when i applied the same settings to asa5515, the tunnel does not come up and always display this on the logs:
reject the packet, received unexpecting payload: payload id:1
reject the packet, received unexpecting payload: payload id:1
VPN
Last Comment
herm paul
ASKER
thank you, John! yes i have done that.
ASKER
whenever i switch to main on both ends (asa5506 & TP-Link), the tunnel goes down. so when i switched both back to aggresive mode, tunnel comes back online and able to ping LANs on both ends.
Aggressive mode makes connections easier, whereas Main is more secure. But if Aggressive works, try it.
ASKER
yes, Aggressive mode works for the asa5506 and the tp-link but not asa5515 & the tp-link
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Good to know but was that not part of the settings I asked you to review.?
ASKER
figured it out myself...
Make a list of the setting of the asa5506 and match these to the settings on the asa5515. Watch for Main vs Aggressive mode (need Main mode). Watch for NAT Traversal and Dead Peer detect settings.
Check the external static and internal addressing to be sure it is correct in the new box.