This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN site-to-site ASA-5505 with Astaro ERROR

I config VPN ASA-5505 with Astaro modem 320 fail
topology : LAN-Astaro-internet-ASA-LAN
i config step-by-step in astro knowledgebase :ASGv7-to-CISCO-ASA5505-Site-to-Site_HowTo

you can help me troubleshoot Astaro config.

Logview
2009:08:21-12:35:51 FW-VinaCap pluto[7012]: | protocol/port in Phase 1 ID Payload is 17/0. accepted with port_floating NAT-T
2009:08:21-12:35:51 FW-VinaCap pluto[7012]: "S_Unknown Object" #67: Peer ID is ID_IPV4_ADDR: '192.168.1.2'
2009:08:21-12:35:51 FW-VinaCap pluto[7012]: "S_Unknown Object" #67: we require peer to have ID '118.69.225.205', but peer declares '192.168.1.2'
2009:08:21-12:35:51 FW-VinaCap pluto[7012]: "S_Unknown Object" #67: sending encrypted notification INVALID_ID_INFORMATION to 118.69.225.205:4500
2009:08:21-12:35:53 FW-VinaCap pluto[7012]: "S_Unknown Object" #67: DPD: Received R_U_THERE for unestablished ISAKMP SA
2009:08:21-12:35:55 FW-VinaCap pluto[7012]: "S_Unknown Object" #67: ignoring Delete SA payload: ISAKMP SA not established

This thread was automatically locked due to age.

0 RFCat_vk_01 over 16 years ago

Hi,
to me it looks like you are using your internal address rather than your external address.

Ian M
Cancel
Vote Up 0 Vote Down

Cancel
0 snooty over 14 years ago in reply to RFCat_vk_01

Are you running the ASA-5505 behind a router?
i.e Is The Port0 (WAN) interface have a public IP address or a NAT address from behind a device?
Cancel
Vote Up 0 Vote Down

Cancel
0 Ölm over 14 years ago

you should activate NAT Traversal (under ipsec - advanced) and configure 192.168.1.2 as peer id in the vpn remote gateway settings
Cancel
Vote Up 0 Vote Down

Cancel