Monday, March 12, 2018

ASA5512x S2S VPN Issue

OK, so this is driving me insane..

We cancelled a contract with a vendor and terminated the VPN between us.

Steps I have taken:

Deleted Tunnel Group

Deleted ACL for the VPN

Deleted Crypto Map for that peer.

Still getting the following from debug cryp ikev1:

[IKEv1]IP = X.X.X.X, Header invalid, missing SA payload! (next payload = 4)

Then, I am getting

Group=X.X.X.X, IP= X.X.X.X, Cant find a valid Tunnel group

Well, I deleted the tunnel group, and the Crypto map, and the VPN profile.. Not sure why it is still trying to build the tunnel.



No comments:

Post a Comment