china-glob-fw1# show isakmp sa Active SA: 2 Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey) Total IKE SA: 2 1 IKE Peer: internet-site-china-dc1 Type : L2L Role : responder Rekey : no State : MM_WAIT_MSG5 2 IKE Peer: internet-site-china-dc1 Type : L2L Role : responder Rekey : no State : MM_WAIT_MSG5 china-glob-fw1# show ipsec sa There are no ipsec sas china-glob-fw1# show ipsec sashow isakmp sa Active SA: 1 Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey) Total IKE SA: 1 1 IKE Peer: internet-site-china-dc1 Type : L2L Role : responder Rekey : no State : MM_WAIT_MSG5 china-glob-fw1# show isakmp sa Active SA: 2 Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey) Total IKE SA: 2 1 IKE Peer: internet-site-china-dc1 Type : L2L Role : responder Rekey : no State : MM_WAIT_MSG5 2 IKE Peer: internet-site-china-dc1 Type : user Role : responder Rekey : no State : MM_WAIT_MSG3 china-glob-fw1# show isakmp sa Active SA: 1 Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey) Total IKE SA: 1 1 IKE Peer: internet-site-china-dc1 Type : user Role : responder Rekey : no State : MM_WAIT_MSG3 china-glob-fw1# show isakmp sa Active SA: 1 Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey) Total IKE SA: 1 1 IKE Peer: internet-site-china-dc1 Type : L2L Role : responder Rekey : no State : MM_WAIT_MSG5
china-glob-fw1# show isakmp sa There are no isakmp sas china-glob-fw1# show isakmp sa There are no isakmp sas china-glob-fw1# show isakmp sa Active SA: 1 Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey) Total IKE SA: 1 1 IKE Peer: internet-site-china-dc1 Type : L2L Role : responder Rekey : no State : MM_ACTIVE china-glob-fw1# show logging %ASA-5-713119: Group = 180.154.181.20, IP = 180.154.181.20, PHASE 1 COMPLETED %ASA-3-713061: Group = 180.154.181.20, IP = 180.154.181.20, Rejecting IPSec tunnel: no matching crypto map entry for remote proxy 10.136.0.0/255.255.0.0/0/0 local proxy 172.10.86.0/255.255.255.0/0/0 on interface global-IF %ASA-3-713902: Group = 180.154.181.20, IP = 180.154.181.20, QM FSM error (P2 struct &0xd7c387d8, mess id 0x637d989d)! %ASA-3-713902: Group = 180.154.181.20, IP = 180.154.181.20, Removing peer from correlator table failed, no match! %ASA-5-713259: Group = 180.154.181.20, IP = 180.154.181.20, Session is being torn down. Reason: crypto map policy not found %ASA-4-113019: Group = 180.154.181.20, Username =180.154.181.20, IP = internet-site-mixiu-dc1, Session disconnected. Session Type: IKE, Duration: 0h:00m:00s, Bytes xmt: 0, Bytes rcv: 0, Reason: crypto map policy not found %ASA-5-713904: IP = 180.154.181.20, Received encrypted packet with no matching SA, dropping %ASA-5-713119: Group = 180.154.181.20, IP = 180.154.181.20, PHASE 1 COMPLETED %ASA-3-713061: Group = 180.154.181.20, IP = 180.154.181.20, Rejecting IPSec tunnel: no matching crypto map entry for remote proxy 10.136.0.0/255.255.0.0/0/0 local proxy 172.10.86.0/255.255.255.0/0/0 on interface global-IF %ASA-3-713902: Group = 180.154.181.20, IP = 180.154.181.20, QM FSM error (P2 struct &0xd7c387d8, mess id 0x12b07d87)! %ASA-3-713902: Group = 180.154.181.20, IP = 180.154.181.20, Removing peer from correlator table failed, no match! %ASA-5-713259: Group = 180.154.181.20, IP = 180.154.181.20, Session is being torn down. Reason: crypto map policy not found %ASA-4-113019: Group = 180.154.181.20, Username = 180.154.181.20, IP = internet-site-mixiu-dc1, Session disconnected. Session Type: IKE, Duration: 0h:00m:00s, Bytes xmt: 0, Bytes rcv: 0, Reason: crypto map policy not found %ASA-5-713904: IP = 180.154.181.20, Received encrypted packet with no matching SA, dropping
|