2
Per this document Cisco ASA 5585-X Hardware Installation Guide https://www.cisco.com/c/en/us/td/docs/security/asa/hw/maintenance/5585guide/5585Xhw/overview.html dated December 14 2017:
Note Online insertion and removal (OIR) of SSPs and network modules is
not supported at this time. Small form-factor pluggable (SFP/SFP+)
transceiver, power-supply ...
2
This IPSec configuration seems a bit loaded, for a simple site-2-site tunnel where one controls both ends.
I suggest the following proceeding
First: Be sure to understand if you're running IKEv1 or IKEv2 between these two ASAs. There's config bits and possible config leftovers from either. Remove the parts you're not using. Troubleshooting IPSec ...
1
It is because you are dealing with ICMP which terminates at an interface on the Asa. In addition to your ACL, you need to permit to the interface with this command
“icmp permit 100.0.10.0 255.255.255.0 outside”
See cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/… for full syntax.
Yes it is annoying that on the ASA you need to execute this ...
Only top voted, non community-wiki answers of a minimum length are eligible
