Why won' t you connect....

So I have a asa 5510 in my main office. I have 4 other remote offices that connect witha 5505 through L2L VPN. Have for years no problems everything is perfect.
We have added a new remote office so I am adding another 5505 to this office. I have everything set exactly the same but this new one won't establish a VPN connection. Have a nice interenet connection but no VPN. Is or was there some major change in ASA Version 8.2(5) that is causing a hicup. All my other ASA's have version 7.2(4).....
What am I missing......
Thanks!!
Result of the command: "show crypto isakmp sa"
There are no isakmp sas
Result of the command: "show crypto ipsec sa"
There are no ipsec sas
: Saved
ASA Version 8.2(5)
hostname ********
enable password mrNAzLB3WoDGll7l encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
interface Ethernet0/0
switchport access vlan 12
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
interface Vlan1
nameif inside
security-level 100
ip address 192.168.90.1 255.255.255.0
interface Vlan12
nameif outside
security-level 0
pppoe client vpdn group AT&T
ip address pppoe setroute
ftp mode passive
clock timezone CST -6
clock summer-time CDT recurring
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
object-group network outbound
access-list 106 extended permit ip 192.168.90.0 255.255.255.0 192.198.10.0 255.255.255.0
access-list nonat extended permit ip 192.168.90.0 255.255.255.0 192.198.10.0 255.255.255.0
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1492
no failover
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list nonat
nat (inside) 1 0.0.0.0 0.0.0.0
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 192.168.90.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set MM esp-3des esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto map outside_map 90 match address 106
crypto map outside_map 90 set peer 222.222.222.22
crypto map outside_map 90 set transform-set MM
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 1
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 43200
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
telnet timeout 5
ssh timeout 5
console timeout 0
vpdn group ATT request dialout pppoe
vpdn group ATT localname [email protected]
vpdn group ATT ppp authentication pap
vpdn username [email protected] password *****
dhcpd dns 208.67.222.222 208.67.220.220
dhcpd auto_config outside
dhcpd address 192.168.90.5-192.168.90.254 inside
dhcpd enable inside
threat-detection basic-threat
threat-detection statistics access-list
threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
webvpn
tunnel-group 222.222.222.22 type ipsec-l2l
tunnel-group 222.222.222.22 ipsec-attributes
pre-shared-key ****
tunnel-group 77.77.777.777 type ipsec-l2l
tunnel-group 77.77.777.777 ipsec-attributes
pre-shared-key ****
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
service-policy global_policy global
prompt hostname context
no call-home reporting anonymous
Cryptochecksum:748218d8f392a0ead093b8ebd225d599
: end
no asdm history enable

So other things came up so this problem got pushed back.......NOW its time to figure it out!!
Yes I have 4 remote sites all connecting to my main site L2L vpn perfectly.
I basicly copied and pasted those commands to the new ASA and changed the required info.
But can not establish any kind traffic between the new site and the main site.
From 5505 from New Site:
sh crypto ipsec sa
There are no isakmp sas
sh crypto ipsec sa
There are no ipsec sas
IF I try and ping the asa 5510 at my main site I recieve a 0% success rate.
I have remote access to this office so I can only currently make changes through the ASA from the asdm.
SO if I do a packet tracer from the 5505 to the 5510
Route-Look up is ok
IP-Options - ok
Nat - drops (acl-drop) Flow is denied by configured rule. But the rule is set the exact same as my others ASA????
Any idea what I should check? or do?

Similar Messages

HT201442 I've reset this thing like 3 times now what's going on with it? why won't it connect to my iTunes?

I've reset this thing like 3 times now what's going on with it? why won't it connect to my iTunes?

Beyond resetting what have you tried?
Common fixes can be to use a different USB port or different USB cable. You can also try updating iTunes, or uninstalling and reinstalling iTunes.
Does your computer see it at all? Is there a little chirp when you plug it in?

Why won't you unlock the bootloader?

Toshiba, why won't you put an APK in the downloads section to unlock the bootloader. Explaining that it will void the warrantee and that you will no longer be able to receive I updates from the service station OTA.

They don't care. Never another Toshiba for me:
1. I had a 750GB Toshiba Cavio external HD that died with minimum usage after 11 months...
2. This tablet has annoying light bleed and is locked.
3. I have PORTAGE R700 laptop - Annoying fan noise !
Will never recommend Toshiba to any one !

Why won't AirPort Connect to the internet?

The green indicator light is on, why won't AirPort connect to the internet? Here's my config http://localhostr.com/files/cfee4c/Problem.zip

Hi Stress Test:
Thanks very much for the reply. I've actually sorted out the problem since posting - just a few minutes ago. I reset the AirPort and reconfigured everything in manual mode with the ethernet cord from my computer connected to the AirPort. I then disconnected the ethernet cord, rebooted the modem and AirPort, did a bit more troubleshooting and suddenly I was connected to the Internet! Still not sure exactly what I did that fixed the problem, but everything is working ok now.
Regards,
John

Why can't I cancel an auto payment to Kdan and why won't you refund my 5.99

WHy can't I cancel anyway auto payment to Kdan and why won't u refund my 5.99 payment?

Nno idea what kdan is.
No refund because because we didn't charge you, this is a user to user forum-NO APPLE HERE.
you need to contact whatever, whomever kdan is and ask them for a refund.

My macbook pro can see the network, gets full signal, but won't connect. When I run diagnostics, it automatically connects, but only if I run the diagnostics. Why won't it connect by itself?

Macbook Pro won't auto connect to wifi, but when I start diagnostics, then it will connect. It seems it requires diagnostics in order to get connected to wifi.
any ideas

SOLUTION!
I've been suffering from this problem for a few months. I tried everything suggested by everyone, and then, today, I had a mad idea.
I used to work in a room in the house that's about 12 metres away from the router. It's on the next storey up and horizontally about 8 metres away. The problem started when I began to work in the same room as the router.
Today I became so frustrated that for some reason I walked into a room about 8 metres away on the same level - Guess what? I connected with no problem at all. Feeling full of joy I walked back to the room where the router is located - Dropped internet connection within a few minutes! Walked back to the the room that's 8 metres away and, hey presto! I have a connection. I now realise that the problem was that I moved too close to the router.
I can think of no logical explanation for my experience, but empirically it seems to work. Does anyone have the faintest idea of why this should be the case? In the absence of an answer I think I may have to start believing in fairies at the bottom of the garden - I'm just off to set a meal for them.
By the way, I don't know if it has any significance, but the router is a BT Infinity router that has replaced the incredibly unreliable Virgin Media cable connection

Why won't Youtube connect anymore?

I recently installed the new OS yesterday on my iphone4 and everything is working except that when I try to open up Youtube now and watch videos, it continually states that youtube cannot connect to the internet. And everytime I do this, I am either connected to wifi or I have service on 3g. I tried to reboot the phone a few times already and it has not fixed the problem. I also connected it to my itunes again to see if I could somehow delete youtube and re-install it but I cannot figure it out. Any ideas on why I am having this problem or any remedies? Much appreciated any and all help!

Without knowing what version of OS X is installed on your computer it's virtually impossible to help you, please complete your profile so you can get some help.

Why won't firefox connect to the internet when IE will?

Mozilla stopped working about a week ago without my knowledge of any updates or anything like that. Internet Explorer still works fine and will connect but when I try to use Firefox it tells me 'unable to connect.' I have already removed Firefox and re-installed but that has not corrected the problem. I also spent some time looking through the settings of Firefox and things seem in order. Do you have any suggestions? I'm not sure why this happened but I can't take IE much longer (yeah your product is that good!). I am currently running windows 7.
Thanks,
Jonathan

There is a troubleshooting article with suggestions. Don't know whether you've tried these yet: [http://support.mozilla.com/en-US/kb/Firefox%20cannot%20load%20websites%20but%20other%20programs%20can Firefox cannot load websites but other programs can | Troubleshooting | Firefox Help].

Why won't you enable downloading photo from iPhone

I think it's annoying that every time I connect my iPhone to my Mac iPhoto pops up, and the worse thing is that I can't just download photos straight from the the phone to the computer.
So why do you make it so hard to drag photos from the phone to the iPhoto library?

think it's annoying that every time I connect my iPhone to my Mac iPhoto pops up,
iPhoto Preference -> General -> Connecting Camera opens... and select your preferred option
and the worse thing is that I can't just download photos straight from the the phone to the computer.
Have you tried Image Capture (in your Applications Folder)?
Who are the "you" you think you're talking to?
Regards
TD
P

Why won't You Tube Videos Load/Play?

My 10 year old daughter has an ipad mini and has been able to watch You Tube videos with no problem. Now, all of a sudden, they won't load or if they load, they don't play. Can anyone tell me why this might happen? Everything else works fine, it's just this.

You could try the suggestions in this thread as well:
https://discussions.apple.com/message/23543107?tstart=0#23543107

Why won't you put adobe flash in iPad 2 or 3 :(

i have 2 links that i can watch movies and series but the iPad 2 won't let me even the iphone 4s my macbook pro does everything it works on these 2 links even the galaxy note and blackberry Playbook but the ipad 2 keep saying that Apple didn't put on ipad and iphone ADOBE FLASH
and can you EXPLAIN WHY :S

Use your Galaxy or Playbook if you have Flash working on those. Flash doesn't work on my toaster either, which I knew full well when I bought it - you don't see me coming in here complaining about it.
Matt

Why won't ipad connect to internet?

My home network/internet is working fine for my MBP on a new Cisco router. ipad was also for a week. This afternoon, the ipad stopped connecting via wifi. It shows 3 bars, but won't connect. No recent updates or changes.
Any others with similar problems or system failures?
-Ira

Select the wireless network to view the network settings. Select Forget this Network for the network to delete the network and network settings from your iPad. Follow this by re-joining the network.
If no change after this, go to Settings > General > Reset and select Reset Network Settings. This will erase all wi-fi networks from your iPad which will require re-joining every wi-fi network that you have access to with your iPad when returning within range of such a wi-fi network.
If no change after this, try restoring your iPad with iTunes as a new iPad or not from your iPad's backup.
If no change after this, your iPad has a hardware problem.

Everybody hates new Skype, why won't you revert?

So, this forum is full of people that think this version of Skype, sucks big dong. I'm not talking about certain people that don't like it, I'm talking about threads that if is about Skype sucking, only negative feedback is given. People hate your damned version of Skype, 70% of your users hate new Skype, 10% just takes whatever it's given and 20% doesn't know how to complain, yet. Don't you understand this Microsoft, people hate YOUR BIG PIECE OF y'know what. Nobody likes it and still your greatest answer is: - Manually go to [this] link.- Then download Skype- Have it complain about newer versions- Have pain uninstalling newer Skype- Have pain installing older version of Skype- Complain little less about Skype, because it's still Microsoft's and it still sucks.- Complain on forums about Skype and watch them dodge your feedback like it was pure lava. If there was a light bulb which shines once user complains about Skype, it would've changed into defusion reactor. So why not swap to that older Skype? What was so bad for it? You can't stand users not have Skype bound with Microsoft or what?!

You know, I am not a hater; but the new skype looks like it was designed by a call center in India. Total lack of intuaitive UI; it is so user unfreindly that EVERY time I use it I feel lost. The Android app requires you to scroll through your entire contract list to get to a contact. It does not have predictive dial contact search - a basic feature of even the most simplistic mobiles for over 10 years. Microsofts attempts to create a unified program model reliant on IE and it is rediculous. I am sure that the uninspired pinheads that designed this software call thier mothers every nigh and tell them all about the wonderful success they had in thier corporate positions; as "developers" in charge of snuffing out the usability and friendliness of what used to be a flagship of digital communication. While I am on the topic I really despise Microsoft for what it did to Windows ..with thier ridiculous Windows 8. Dont they understand that people who actually use computers to PRODUCE (rather than consume) content usually have multiple screens and minimal coherent user interface is the lifeblood of productivity. BUT NOOOO Microsoft "developers" (deveolutionists) make the UI buttons big enough to still allow an epileptic in a Grande Mal to use a computer. Why did you do that ??? You have blanketed the same functionality with a ridiculous UI that has to be "peeled back" anytime I want to do something useful. Once again I am sure the unispired corporate coffee drinkers call mom every night and tell her how they are changing the world.....

Why won't you let me use export pdf?

I have a subscription to export pdf and now I can't use it. Why is that?Adobe ExportPDF (read only)

Hi fatboy327185,
I checked your account and don't see any reason why you wouldn't be able to log in to ExportPDF. What happens when you try to log in directly to https://cloud.acrobat.com/exportpdf?
(If you're trying to log in from Reader, please make sure that you have the most current version by choosing Help > Check for Updates. Earlier versions could make logging in to ExportPDF difficult.)
Best,
Sara

Why won't Facetime connect?

I try to Facetime my friends and family and it will say its "connecting" but then cancel all the sudden.

Hello iaflibot,
With issues with FaceTime not connecting, take a look at the article below. It will have you verify the settings of your Mac as well as checking issues with connecting over Wi-Fi.
FaceTime for Mac: Troubleshooting FaceTime
http://support.apple.com/en-us/HT203585
Regards,
-Norm G.

Why won' t you connect....

Similar Messages

Maybe you are looking for