Hi.
I’m trying to configure an ipsec vpn between 2 ASA 5505 (ASAv GNS3). However, the tunnel does not come up.
ASA1# sh crypto isa sa
There are no IKEv1 SAs
There are no IKEv2 SAs
ASA1# sh crypto ipsec sa
There are no ipsec sas
The topology is the same in this lecture ipsec vpn ikev1.
This is the Configuraton:
ASA-1
nameif INSIDE
security-level 100
ip address 192.168.1.254 255.255.255.0
nameif OUTSIDE
security-level 0
ip address 10.10.10.1 255.255.255.0
crypto ikev1 policy 10
authentication pre-share
encryption aes
hash sha
group 2
lifetime 3600
crypto ikev1 enable OUTSIDE
crypto isakmp identity address
tunnel-group 10.10.10.2 type ipsec-l2l
tunnel-group 10.10.10.2 ipsec-attributes
ikev1 pre-shared-key MY_SHARED_KEY
access-list LAN1_LAN2 extended permit ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255.0
crypto ipsec ikev1 transform-set MY_TRANSFORM_SET esp-aes-256 esp-sha-hmac
crypto map MY_CRYPTO_MAP 10 match address LAN1_LAN2
crypto map MY_CRYPTO_MAP 10 set peer 10.10.10.2
crypto map MY_CRYPTO_MAP 10 set ikev1 transform-set MY_TRANSFORM_SET
crypto map MY_CRYPTO_MAP 10 set security-association lifetime seconds 3600
crypto map MY_CRYPTO_MAP interface OUTSIDE
ASA-2
nameif INSIDE
security-level 100
ip address 192.168.2.254 255.255.255.0
nameif OUTSIDE
security-level 0
ip address 10.10.10.2 255.255.255.0
crypto ikev1 policy 10
authentication pre-share
encryption aes
hash sha
group 2
lifetime 3600
crypto ikev1 enable outside
crypto isakmp identity address
tunnel-group 10.10.10.1 type ipsec-l2l
tunnel-group 10.10.10.1 ipsec-attributes
ikev1 pre-shared-key MY_SHARED_KEY
access-list LAN1_LAN2 extended permit ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255.0
crypto ipsec ikev1 transform-set MY_TRANSFORM_SET esp-aes-256 esp-sha-hmac
crypto map MY_CRYPTO_MAP 10 match address LAN1_LAN2
crypto map MY_CRYPTO_MAP 10 set peer 10.10.10.2
crypto map MY_CRYPTO_MAP 10 set ikev1 transform-set MY_TRANSFORM_SET
crypto map MY_CRYPTO_MAP 10 set security-association lifetime seconds 3600
crypto map MY_CRYPTO_MAP interface OUTSIDE