I am attempting to setup a VPN connection between a Sonicwall NSA 2600 and Cisco ASA 5515X, where the Cisco ASA 5515X is using a load balancer for it's internet connection (terms used by the client). Everything has been reviewed multiple times by Sonicwall Support and the client. The preshared secret is correct, Phase 1 and 2 are setup identically on both sides, Public IP and interesting traffic is correct. This is the configuration for both sides -
AES 256 SHA-1 DH5 28800
AES-256 SHA-1 No PFS
There is also a NAT policy that is in place for the host coming from the Sonicwall. That has been reviewed multiple times with no issues seen in it's configuration. As the client and I were working on this, we discovered that when I pinged the interesting traffic on his side, it would bring up his tunnel, but no traffic could cross over. Within a few minutes, the tunnel would tear down on it's own. He could not get the tunnel to come up when he attempted to ping my interesting traffic. He recognized the issue once this occurred. He told me that he saw this with another vendor he was working with. They also had a Sonicwall, and they had the same issue. He told me that the solution would be for me to ignore the ISAKMP identity (I'm not quite sure how that is related, but that he was pretty certain that was the issue). Sonicwall does not provide me an option to do this, and the support team has not given me a way to do this either.
So this is where I am currently at with along the troubleshooting process.