Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
-
Site to Site VPN - ASA 5505 to ISA 2006 - Security Mismatch
I ran ISAKMP and IPSEC debugs when trying to ping an internal host behind the ISA. Here is the output: ciscoasa(config)# Dec 24 01:17:46 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0 Dec 24 01:17:46 [IKEv1]: IP = 10.213.63.249, IKE Initiator: New Phase 1, Intf NP Identity...- chapers
- Post #12
- Forum: Security, hacker detection & forensics
-
Site to Site VPN - ASA 5505 to ISA 2006 - Security Mismatch
When I ping from behind the ISA I get a request timed out, but I can ping the ASA outside interface. When I ping the internal range from the ISA itself I get a 'Negotiating IP Security'. Any ideas? Thanks.- chapers
- Post #10
- Forum: Security, hacker detection & forensics
-
Site to Site VPN - ASA 5505 to ISA 2006 - Security Mismatch
From the ISA Server.- chapers
- Post #8
- Forum: Security, hacker detection & forensics
-
Site to Site VPN - ASA 5505 to ISA 2006 - Security Mismatch
I am now able to ping the ASA's outside interface (eth0/0) from the ISA Server which is an improvement. But I cannot ping the 192.168.0.0 range which sits on the internal range behind the ASA. How am I able to route / forward VLAN 1 traffic to the outside interface so clients can reach the...- chapers
- Post #6
- Forum: Security, hacker detection & forensics
-
Site to Site VPN - ASA 5505 to ISA 2006 - Security Mismatch
Thanks, I will make the NAT change and post the debug outputs on Monday.- chapers
- Post #5
- Forum: Security, hacker detection & forensics
-
Site to Site VPN - ASA 5505 to ISA 2006 - Security Mismatch
1) Security levels reversed, thanks. 2) How do I bypass NAT on the inside? 3) ISA Phase 1 Settings: 3DES, SHA-1, Group 2 ISA Phase 2 Settings: 3DES, SHA-1, PFS Group 2, Generate New Key ever 100000 KB Generate New Key Every 3600 Seconds 4) I will tighten up later as soon as I can test...- chapers
- Post #3
- Forum: Security, hacker detection & forensics
-
Site to Site VPN - ASA 5505 to ISA 2006 - Security Mismatch
Hi, first post here so hello all. I am trying to create a site to site VPN between an ASA 5505 and ISA Server 2006. I'm having trouble connecting the two end points. I believe there is a security mismatch. I have checked the IPSec and IKE settings numerous times, followed several guides to no...- chapers
- Thread
- Replies: 12
- Forum: Security, hacker detection & forensics
