Home | Site Map | How To | Windows Vista | Case Studies | Articles | Forums | Services | Donations | Careers | About Us | Contact Us|

VPN between ASA 5510 and NetVanta 2054 - Case Study

Situation: The client creates a site to site VPN between Cisco ASA5510 and NetVanta 2054, but it doesn't work. The links to check the ASA configuration and NetVanta 2054 configuration.  

Troubleshooting: 1. When using trace route 192.168.0.230 command in NetVanta 2054, it stops in 192.168.0.1.

2. From Cisco ASA, you can the remote WAN but not any private IP.\

3. debug crypto isa and debud crypto ipsec show that the ASA rejects any traffic from 192.168.11.x.

4. The below two lines cause the problem:

access-list Outside_cryptomap_20 extended permit ip 192.168.0.0 255.255.255.0 host 206.81.53.106

access-list Inside_nat0_outbound extended permit ip 192.168.0.0 255.255.255.0 host 206.81.53.106

Resolution: cleared the tunnel and then send an extended ping to a 192.168.11.1 host on the remote end like below.

access-list Inside_nat0_outbound extended permit ip 192.168.0.0 255.255.255.0 192.168.11.0 255.255.255.0

access-list Outside_cryptomap_20 extended permit ip 192.168.0.0 255.255.255.0 192.168.11.0 255.255.255.0

Related Topics