Quantcast
Channel: Azure Networking (DNS, Traffic Manager, VPN, VNET) forum
Viewing all articles
Browse latest Browse all 6513

Virtual Network Site-to-Site Cisco ASA 5505 Configuration

$
0
0

I've set up a Virtual Network Azure VPN on Cisco ASA 5505 however I've been working on it for more than 3 days without success. I cannot establish a connection between my OnprimeseNetwork and AzureNetwork. I used the next template for configuring ASA 5505 Version 9.0(2):

object-group network OnPremiseNetwork
network-object 192.168.10.0 255.255.255.0
object-group network AzureNetwork
network-object 10.0.0.0 255.0.0.0

access-list Azure_AccessList extended permit ip,udp,esp object-group OnPremiseNetwork object-group AzureNetwork

nat (inside,outside) source static OnPremiseNetwork OnPremiseNetwork destination static AzureNetwork AzureNetwork

crypto ikev1 enable outside
crypto ikev1 policy 10
 authentication pre-share
 encryption aes-256
 hash sha
 group 2
 lifetime 28800
 
crypto ipsec ikev1 transform-set AzureTransformSet  esp-aes-256 esp-sha-hmac
crypto ipsec security-association lifetime seconds 3600
crypto ipsec security-association lifetime kilobytes 102400000

crypto map outside_map 3 match address Azure_AccessList
crypto map outside_map 3 set peer 137.117.178.**
crypto map outside_map 3 set transform-set AzureTransformSet
crypto map outside_map interface outside

tunnel-group 137.117.178.** type ipsec-l2l
tunnel-group 137.117.178.** ipsec-attributes
pre-shared-key ***

sysopt connection tcpmss 1350

I am not a Cisco guru and it's driving me crazy. Please, any help will be more than welcome

Thanks!


Viewing all articles
Browse latest Browse all 6513

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>