L2L issue, the tunnel does not getting up from one direction

Hello,
We have configure a L2L vpn between Asa and 1841 router. We are facing this issue.
The tunnel is not getting up from the 1841 site never. When we are trying to generate traffic from the ASA site the tunnel is up and we can see decryps and encryps packets.
Router 1841 Config:
crypto isakmp policy 100
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key * address 213.249.XX.XX
crypto ipsec transform-set XXXXX esp-3des esp-md5-hmac
crypto map EKO_BG 100 ipsec-isakmp
set peer 213.249.x.x
set security-association lifetime seconds 28800
set transform-set XXXXX
set pfs group2
match address 111
interface FastEthernet0/0.2
encapsulation dot1Q 3338
ip address 212.200.30.130 255.255.255.252
ip nat outside
ip virtual-reassembly
crypto map XXXXX
ip nat pool nat_pool 93.87.XX.XX 93.87.XX.XX prefix-length 29
ip nat inside source list 101 pool nat_pool overload
ip nat inside source static 10.70.2.10 93.87.18.161
ip nat inside source static 10.70.25.10 93.87.18.162
ip nat inside source static 10.70.36.5 93.87.18.163
ip nat inside source static 10.70.39.10 93.87.18.164
ip nat inside source static 10.70.5.10 93.87.18.165
access-list 101 deny ip 10.70.200.0 0.0.0.255 any
access-list 101 permit ip 10.70.0.0 0.0.255.255 any
access-list 111 permit ip 10.70.200.0 0.0.0.255 172.40.10.100 0.0.0.3
Asa Config:
access-list inside_nat0_outbound extended permit ip 172.40.10.100 255.255.255.252 10.70.200.0 255.255.255.0
access-list outside_cryptomap_320 remark xxxxxxx
access-list outside_cryptomap_320 extended permit ip 172.40.10.100 255.255.255.252 10.70.200.0 255.255.255.0
access-list inside_pnat_outbound_V5 extended permit ip host 10.8.x.x 10.70.200.0 255.255.255.0
pager lines 24
nat (inside) 9 access-list inside_pnat_outbound_V5
crypto ipsec transform-set xxxxx esp-3des esp-md5-hmac
crypto map mymap 150 match address
crypto map mymap 150 set pfs
crypto map mymap 150 set peer XXXXXX
crypto map mymap 150 set transform-set XXX
crypto map mymap 150 set security-association lifetime seconds 28800
crypto map mymap 150 set security-association lifetime kilobytes 10000
crypto map mymap 320 match address outside_cryptomap_320
crypto map mymap 320 set pfs
crypto map mymap 320 set peer XXXXX
crypto map mymap 320 set transform-set XXXXX
crypto map mymap 320 set security-association lifetime seconds 28800
crypto map mymap 320 set security-association lifetime kilobytes 4608000
crypto map mymap 65535 ipsec-isakmp dynamic outside_dyn_map
crypto map mymap interface outside
isakmp policy 150 authentication pre-share
isakmp policy 150 encryption 3des
isakmp policy 150 hash md5
isakmp policy 150 group 2
tunnel-group 212.200.x.x type ipsec-l2l
tunnel-group 212.200.x.x ipsec-attributes
pre-shared-key *
Please advise.
Thank you.

hello Ashley,
thank you for this info. Now from the router site the tunneling is getting up and I can see packets but althought the tunnel is up it can not make telnet to our server (172.40.10.100) on a specific port.
We from ASA site can ping router Site and make telnet.
Any ideas???
Thank you all from your answers!

Similar Messages

I am part of a family sharing setup. Can I have my own payment method so the organizer does not get charged for my purchases?

I am part of a family sharing setup. Can I have my own payment method so the organizer does not get charged for my purchases? If so, how do I set this up?

Yes. Just redeem gift cards so that your own account always has a sufficient credit balance. Here is how it works:
Family purchases and payments
After you set up your family, any time a family member initiates a new purchase it will be billed directly to your account unless that family member has gift or store credit. First, their store credit will be used to pay the partial or total bill. The remainder will bill to the family organizer's card.

I can no longer get to Facebook Via firefox It comes up loading in the tab but does not get any further one minute it was working the next it was,nt should I try uninstalling firefox then reinstall or does anyone know what could of happened thanks

# Question
I can no longer get to Facebook Via firefox It comes up loading in the tab but does not get any further one minute it was working the next it was,nt should I try uninstalling firefox then reinstall or does anyone know what could of happened thanks

* "Clear the Cache": Tools > Options > Advanced > Network > Offline Storage (Cache): "Clear Now"
* "Remove the Cookies" from sites that cause problems: Tools > Options > Privacy > Cookies: "Show Cookies"
Start Firefox in [[Safe Mode]] to check if one of your add-ons is causing your problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
* Don't make any changes on the Safe mode start window.
See [[Troubleshooting extensions and themes]] and [[Troubleshooting plugins]]

HT3131 westinghouse SK-261H735S does not get signal from my MACBOOK PRO

My tv (westinghouse SK-261H735s does not get signal from my Macbook Pro, can anyone help?

My tv (westinghouse SK-261H735s does not get signal from my Macbook Pro, can anyone help?

Hi, I have installed VMware Fusion to switch to windows. The game I played is now frozen and even turning off the computer does not get it out of the 'frozen' mode. What can I do?

Hi, I have installed VMware Fusion to switch between Mac and Windows. It worked fine until I installed and played a game (Atlantis). Now the screen in frozen and even turning off the computer does not help. Does anybody have an idea what to do?

Try the remaining items of:
iOS: Not responding or does not turn on
If not successful, make an appointment at the Genius Bar of an Apple store.
Apple Retail Store - Genius Bar

FCP Kona Card does not get input from FCP??

Kona card LHE. Had it working just fine but I did something goofy and the Kona control panel does not get an input from FCP. Open to any and all suggestions.
Thanks
John

but I did something goofy.........Open to any and all suggestions.
Figure out what you did goofy and then do the opposite.
Seriously, what have you done to troubleshoot this? There's any number of goofy things that you could do that may result in this issue. I'd start with reading the Kona manual and the rather extensive part in FCP about external monitoring.

The system does not get Storage Location of the material from the Contract

Hi to all,
We are encountering a problem now regarding the PR to PO conversion. Our ABAPer has made a background job for the User to convert a PR to PO using ME59N.
Background Job : ZPTI_MM_PR_PO_CON
Program : RM06BB30
Tcode: ME59N
Variant : SAMPLE2_ME59N ( Plant, Vendor, POrg, Pgrp.)
Rule : When the PO is converted the STORAGE LOCATION of the material should be gotten from a CONTRACT/AGREEMENT instead of the SLoc defaulted in PR.
Problem: When the backround job is finished, the PO is converted but the STORAGE LOCATION did not get from the CONTRACT.
Steps done :
1. Create a Contract (ME31K)
    1.1 Specify the SLOC of the material
2. Create PR (ME51N) and enter the Contract Number inside the PR
    note : In the PR the material has a Storage Location which defaults from the Material Master.
3. Run SM36 and enter the job ZPTI_MM_PR_PO_CON
4. Set the job to "Immediately"
5. Click Steps icon and enter the program RM06BB30 and variant SAMPLE2_ME59N
6. Save
7. Go to SM37 and check the job if finished.
8. When the job is finished, check the PR if it has a PO.
9. Display the PO.
10. Check if the storage location in PO has gotten from the Contract
     The problem now appeared.
We have tried to use ME59N alone and not using the background job. The system has gotten the correct Storage Location, thus it got from the Contract.
Please help what should be checked on our side. Our ABaper is also currently debugging the program but we
are seeking help to fasten the solution.
Best Regards,
Elynne

Hi Elynne,
Definitively, it is a problem with ME59N background process.
It is better if you can create a message to SAP asking for the solution.
I only found the next SAP note:
Note 1287723 - ME59N in backgound does not populate PR details in PO.
But, I do not know if it will help to resolve your issue.
I hope this little information can help you in anyway.
Kind regards,
Sandra

Cisco 881 ISR IPSec VPN Tunnel does not pass traffic from the vlan.

I have a cisco 881 ISR Router with a site-to-site IPsec vpn tunnel to a mikrotik device on the other end (I inherited this from my client). The tunnel is constructed properly and is up, however traffic does not pass or get routed to the FA4 interface. I see in my packet captures that it hits the vlan1 interface (vlans are required on the L2 ports) and does not pass to the tunnel.
This is my configuration:
141Kerioth#sh config
Using 3763 out of 262136 bytes
! Last configuration change at 01:02:41 UTC Mon May 26 2014 by admin
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname 141Kerioth
boot-start-marker
boot-end-marker
logging buffered 51200 warnings
aaa new-model
141Kerioth#do wr mem
              ^
% Invalid input detected at '^' marker.
141Kerioth#wr mem
Building configuration...
[OK]
141Kerioth#sh run
Building configuration...
Current configuration : 5053 bytes
! Last configuration change at 01:38:06 UTC Mon May 26 2014 by admin
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname 141Kerioth
boot-start-marker
boot-end-marker
logging buffered 51200 warnings
aaa new-model
aaa authentication login default local
aaa authentication ppp default local
aaa session-id common
memory-size iomem 10
crypto pki trustpoint TP-self-signed-580381394
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-580381394
revocation-check none
rsakeypair TP-self-signed-580381394
crypto pki certificate chain TP-self-signed-580381394
certificate self-signed 01
30820229 30820192 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 35383033 38313339 34301E17 0D313430 35323231 38323333
365A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3538 30333831
33393430 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
B001A012 2CA6970C 0648798B 2A786704 84F2D989 83974B19 9B4287F2 4503D2C9
173F23C4 FF34D160 202A7565 4A1CE08B 60B3ADAE 6E19EE6E 9CD39E72 71F9650E
930F22FE C4441F9C 2D7DD420 71F75DFC 3CCAC94E BA304685 E0E62658 A3E8D01C
D01D7D6A 5AF0B0E6 3CF6AF3A B7E51F83 9BF6D38E 65254E1F 71369718 ADADD691
02030100 01A35330 51300F06 03551D13 0101FF04 05300301 01FF301F 0603551D
23041830 168014D6 24878F12 1FFADF2F 537A438E 6DD7FB6B D79E4130 1D060355
1D0E0416 0414D624 878F121F FADF2F53 7A438E6D D7FB6BD7 9E41300D 06092A86
4886F70D 01010505 00038181 00771667 FCA66002 8AB9E5FB F210012F C50B586F
9A9640BB 45B4CEFD 030A38C0 E610AAC8 B41EF3C4 E55810F9 B2C727CF C1DEFCF1
0846E7BC 1D95420E 5DADB5F8 EFE7EB37 B5433B80 4FF787D4 B1F2A527 06F065A4
00522E97 A9D2335C E83C4AE1 E68D7A41 9D0046A7 ADCC282B 7527F84D E71CC567
14EF37EA 15E57AD0 3C5D01F3 EF
        quit
ip dhcp excluded-address 10.0.16.1
ip dhcp pool ccp-pool
import all
network 10.0.16.0 255.255.255.0
default-router 10.0.16.1
dns-server 8.8.8.8
lease 0 2
ip domain name kerioth.com
ip host hostname.domain z.z.z.z
ip name-server 8.8.8.8
ip name-server 4.2.2.2
ip cef
no ipv6 cef
license udi pid CISCO881-K9 sn FTX180483DD
username admin privilege 15 secret 4 CmmfIy.RPySmo4Q2gEIZ2jlr3J.bTBAszoe5Bry0z4c
username meadowbrook privilege 0 password 0 $8UBr#Ux
username meadowbrook autocommand exit
policy-map type inspect outbound-policy
crypto isakmp policy 1
encr 3des
authentication pre-share
group 5
crypto isakmp key 141Township address z.z.z.z
crypto isakmp keepalive 10
crypto ipsec transform-set TS esp-3des esp-sha-hmac
mode tunnel
crypto map mymap 10 ipsec-isakmp
set peer z.z.z.z
set transform-set TS
match address 115
interface Loopback0
no ip address
interface Tunnel1
no ip address
interface FastEthernet0
no ip address
interface FastEthernet1
no ip address
interface FastEthernet2
no ip address
interface FastEthernet3
no ip address
interface FastEthernet4
description $FW_OUTSIDE_WAN$
ip address 50.y.y.y 255.255.255.240
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
crypto map mymap
interface Vlan1
description $ETH_LAN$
ip address 10.0.16.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 115 interface Vlan1 overload
ip nat inside source list 199 interface FastEthernet4 overload
ip nat inside source route-map nonat interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 50.x.x.x
access-list 110 deny   ip 10.0.16.0 0.0.0.255 10.0.1.0 0.0.0.255
access-list 110 permit ip 10.0.16.0 0.0.0.255 any
access-list 115 permit ip 10.0.16.0 0.0.0.255 10.0.1.0 0.0.0.255
access-list 144 permit icmp host c.c.c.c host 10.0.1.50
access-list 144 permit icmp host p.p.p.p host 10.0.16.105
access-list 199 permit ip a.a.a.a 0.0.0.255 any
no cdp run
route-map nonat permit 10
match ip address 100
line con 0
no modem enable
line aux 0
line vty 0 4
access-class 1 in
exec-timeout 30 0
privilege level 15
transport preferred ssh
transport input ssh
line vty 5 15
access-class 23 in
privilege level 15
transport input telnet ssh
cns trusted-server all-agents x.x.x.x
cns trusted-server all-agents hostname
cns trusted-server all-agents hostname.domain
cns id hardware-serial
cns id hardware-serial event
cns id hardware-serial image
cns event hostname.domain 11011
cns config initial hostname.domain 80
cns config partial hostname.domain 80
cns exec 80
end

Why do you have following command on the PIX?
crypto map outside_map 40 set transform-set 165.228.x.x
Also you have this transform set on the PIX:
crypto ipsec transform-set 10.112.60.0 esp-aes-256 esp-sha-hmac
This does not match the transfor set on the router:
crypto ipsec transform-set tritest esp-3des esp-md5-hmac
Where are you using the access-list/route-map
101 ?

When adding a new OU container to User Profile Sync the users does not get synchronized

We have an OU that users on leave are located. These users would "fall out" of sharepoint when moved to this OU, so I went in the sync and ticked on that that OU to be synced as well.
When running a new sync after this change, it only syncs one user, although the OU has about 30 users there. Same result if I do a full sync or an incremental sync.
Any help would be greatly appreciated.

Double check that the user really is being synced. The most common issue is caused by user error when people think a user is being synced but is not.
Once you've validated that the user in the OU really is being updated in SharePoint you should check your synchronisation connection rules. Identify which filters you have set and check one of the non-importing users in the OU. Check each and every one of
those filters to try to identify which is causing them to be removed.
Finally you can also check the MIIS client which sometimes gives more information about why users are or are not being imported.

Role Assignment does not get distributed from CUA

Hi all.
I create user and role in CUA client.
There is no error in role generation.
When I try to find my role in SU01 by pressing F4 of my role (Y*), system give me message role not found. But that's not my biggest problem.
I can assign my role by typing manually.
My biggest problem is only SAP ID get distributed into target system, not the role assignment.
So in the target system I can see my user id without role assign to it.
I checked my user id from SCUL. User and profile does not contain any error message in target client.
I tried with transaction RSCCUSND, still my user id does not contain role.
I checked my SCUM transaction, profiles and roles has Global settings.
Does someone can give me a clue why this happens and how to solve this issue.
Many thanks

Lets try to simplify the thing in layman language.
CUA is to manage user ids of different SAP systems (client level) centrally from one system without logging into each of those child systems. To do so, the Central system stores the information of the Roles (and their Text and Generated Profile Name ONLY) and Profiles (standard or non-generated profiles) in few of it's tables like: USLA04, USRSYSACT, USRSYSACTT, USRSYSPRF, USRSYSPRFT etc.
It doesn't mean that the Roles for the corresponding child system is present in the central system and no need of creating (or making available) such roles in the Child systems. The physical existence of the Role for each system doesn't get transferred in the Central system when you do the Text comparison rather the identity only against the corresponding system.
So the Roles has to be there in the corresponding Child systems and the Assignment (not physical assignment - only linking the name for that child system) of them to the user ids can be done from Central system.
Also you have got the idea of Text comparison and requirement of keeping or creating roles in each system based on it's nature from the other posts.
Let us know any more questions you have.
regards,
Dipanjan

The audio does not play back from the speakers of my laptop, it plays only through headphones ?

Hi, I am not able to hear playback of audio from the speakers on my laptop. Only if I connect a headphone I am able to hear. Kindly help resolve.
Regards,
Vivek. V.

Hi
1) Try a Hard Reset as follows.
Remove any devices connected to the notebook. Shut down the notebook, unplug the AC Adapter and then remove the battery. Hold down the Power button for 30 seconds. Re-insert the battery, plug in the AC Adapter and start the notebook - check if the speakers are now working.
2) Please First check if the speaker icon on the unit is not muted.
3) Go to device manager and uninstall the Sound driver and restart and unit will install the driver automatically.
4) Try doing System restore to the date when the unit was working fine.
5) Try to update the driver from hp.com website for Audio & Bios.
Let us know how it goes!
"I work for HP."
****Click the (purple thumbs up icon in the lower right corner of a post) to say thanks****
****Please mark Accept As Solution if it solves your problem****
Regards
Manjunath

Db tools open connection.vi does not get password from dsn file

I am

The database is a Microsoft SQL server database. Again, my IT group does not want the password hard coded into the application. Their preference would be for the password to be extracted from the dsn. I have tried both a file dsn and a system dsn which were created in the data sources app in control panel --> administartive tools. Neither dsn works (unless I wire the password to the databse tools open connection vi). Both dsn's work fine from the windows data sources application. I have not been able to figure out how to attach graphics to a post on the board here, so I 'm not sure how to attach the error message (or my block diagram). The text from the error message is below. Wiring in the password causes the error to go away.
Error -2147217843 occurred at DB Tools Open Connec (String).vi->DB Tools Open Connec (Path).vi->FindShiftNumber.vi
Possible reason(s):
Exception occured in Microsoft OLE DB Provider for ODBC Drivers: [Microsoft][ODBC SQL Server Driver][SQL Server]Login failed for user 'eslprodsproc'. in DB Tools Open Connec (String).vi->DB Tools Open Connec (Path).vi->FindShiftNumber.vi

What do you do if the mac does not respond, frozen on one screen?

Any ideas?

Is this a network problems as that's the forum in which you posted?
To restart the computer press and hold the Power button until the computer shuts down. Then do the following:
Repair the Hard Drive and Permissions
Boot from your OS X Installer disc. After the installer loads select your language and click on the Continue button. When the menu bar appears select Disk Utility from the Utilities menu. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list. In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive. If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the installer.
If DU reports errors it cannot fix, then you will need Disk Warrior and/or Tech Tool Pro to repair the drive. If you don't have either of them or if neither of them can fix the drive, then you will need to reformat the drive and reinstall OS X.
Quit the installer and restart the computer.
If there's more to your problem then you need to provide a more complete description.

What is the best way to get PATHS from one Photoshop psd file to another?

Hi! New on the site, and I signed up specifically to ask the best way to import one .psd file into another, including the paths on the paths palette.
Almost all of my Photoshop drawings make heavy use of vector paths, which I then stroke using using PS natural-media brushes and the "stroke paths" function (usually with "simulate pressure" checked.) Also, my .psd files tend to be, um, HUGE... and I typically break up a whole drawing into separate PS files and then assemble all of them into one final finished graphic.
I have no trouble moving raster stuff from file to file. Just put all the layers I want to transfer into a group and drag the group to the other .psd. Works fine, including layer masks. But I have not found a good way to get vector paths from the Paths palette of one .psd to another. Of course I can select paths and copy them to the Win clipboard, switch to the other .psd, and paste them back in. The drawback to that method is that I lose the correct size relation between the results of previously done "stroke paths" operations (on raster layers) and the paths that generated them. Sometimes the copied-in paths are way too large, sometimes way too small, never Just Right.
As I'm sure most of you know, if you resize an entire Photoshop document from within PS, any paths it contains are correctly resized along with everything else. That's no longer true after grouped raster layers are dragged over to another document but paths are copied and pasted in. The size connection is lost. (Location placement, too.)
I WANT those paths! After I bring a piece of a drawing into the full final drawing, what looked good when I was working on it separately often doesn't look right any longer and I want to re-stroke those paths using different brush diameter, opacity, etc., or maybe even a completely different brush.
I've tried bring outside .psd files in as smart objects with the Place command but either that doesn't work or I'm not doing it right. Using Place, the paths in the Placed document don't come in at all.
I'll be very grateful for any hints or strategies any of you knowledgeable folks can give me. Thanks very much!
Jim
Note, PS CS3 extended on Win 7 pro.

Denny
1. Connect the two macs - firewire, ethernet, sneakernet as suits you - and copy the iPhoto Library Folder from Old Machine to New Machine. Drag it from Home/Pictures to the same location on the new machine.
2. Because all the files 'belong' to the account on the old machine, you have to update the file permissions: hence Download BatchMod from
http://macchampion.com/arbysoft/
And apply it to the iPhoto Library Folder using the settings found here:
http://homepage.mac.com/toad.hall/.Pictures/Forum/BatChmod.png
(Credit to Old Toad for this one).
Note: This must be run on the new machine after copying the files over.
3. Then launch iPhoto on the new machine.
Regards
TD

IPod touch audio issue: why do I only get sound from one channel in my ear-pods?

After upgrading my brand new iPod touch 5th generation to IOS 6.1.2 I only get sound from the right channel of my ear-pods.
I did not have this issue with IOS 6.1.1. Is this a problem derived from new IOS? Any idea on how to solve it?
Appreciate your help!

Have you tried other headphones? If you confirmned it is an iPod problem:
- Try cleaning out/blowing out the headphone jack. Try inserting/removing the plug a dozen times or so.
Try the following to rule out a software problem
- Reset the iPod. Nothing will be lost
Reset iPod touch: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Reset all settings
Go to Settings > General > Reset and tap Reset All Settings.
All your preferences and settings are reset. Information (such as contacts and calendars) and media (such as songs and videos) aren’t affected.
- Restore from backup
- Restore to factory settings/new iPod.
- Make an appointment at the Genius Bar of an Apple store. Seems you have a bad headphone jack.
Apple Retail Store - Genius Bar
Apple will exchange your iPod for a refurbished one for this price. They do not fix yours.
Apple - iPod Repair price
A third-party place like the following will replace the jack for less. Google for more.
iPhone Repair, Service & Parts: iPod Touch, iPad, MacBook Pro Screens
Replace the jack yourself
iPod Touch Repair – iFixit

L2L issue, the tunnel does not getting up from one direction

Similar Messages

Maybe you are looking for