New answers tagged


Each ASA has to know the networks behind the others - either use static routes or set up a routing protocol like OSPF. Without proper routing, all traffic goes to the default gateway.


I found the solution to this eventually, with some help. The issue was that on the ASR side, the tunnel was in its default configuration which uses GRE, which the ASA doesn't support. The solution was to change the tunnel mode to ipsec ipv4 like so: interface Tunnel5 tunnel mode ipsec ipv4 With this done, bidirectional traffic was possible over the tunnel.

Top 50 recent answers are included