CISCO ASA 5505 SITE TO SITE VPN SOFTWARE

IKEv2-PLAT-5: Incrementing outgoing negotiating IKEv2-PLAT-5: New ikev2 sa request admitted IKEv2-PLAT-3: (16) tunn grp type set to: L2L IKEv2-PLAT-3: Translating IKE_ID_AUTO to = 255 IKEv2-PLAT-3: supported_peers_auth_method = 2 IKEv2-PLAT-3: mapped to tunnel group 10.0.0.2 Ikev2 local-authentication pre-shared-key *****ДЄccess-list l2l_list extended permit ip host 192.168.2.99Д¬rypto map outside_map 1 set peer 10.0.0.1Дebugs ASA1 (Initiator) Message DescriptionДЄSA1 receives a packet that matches the crypto acl for peer ASA 10.0.0.2. Ikev2 remote-authentication pre-shared-key ***** Debugs Used debug crypto ikev2 protocol 127Дebug crypto ikev2 platform 127 ASA Configurations ASA1 interface GigabitEthernet0/0ДЄccess-list l2l_list extended permit ip host 192.168.1.1ДЄccess-list l2l_list extended permit ip host 192.168.1.12Д¬rypto map outside_map 1 match address l2l_listД¬rypto map outside_map 1 set peer 10.0.0.2Д¬rypto map outside_map 1 set ikev2 ipsec-proposal AES256 For more detailed information on the differences and an explanation of the packet exchange, refer to IKEv2 Packet Exchange and Protocol Level Debugging. Whereas in IKEv1 there was a clearly demarcated phase1 exchange that consisted of 6 packets followed by a phase 2 exchange that consisted of 3 packets, the IKEv2 exchange is variable. The packet exchange in IKEv2 is radically different from what it was in IKEv1. Refer to Cisco Technical Tips Conventions for more information on document conventions. If your network is live, make sure that you understand the potential impact of any command. All of the devices used in this document started with a cleared (default) configuration.

The information in this document was created from the devices in a specific lab environment.

CISCO ASA 5505 SITE TO SITE VPN SOFTWARE

This document is not restricted to specific software and hardware versions. There are no specific requirements for this document. This document provides information to understand IKEv2 debugs on the Adaptive Security Appliance (ASA) when preshared key (PSKs) are used.

Cisco asa 5505 site to site vpn