Cisco ASA VPN Quick Notes

I thought I would do a quick notes section on some of the Cisco VPNs and problems I have seen.

If you use a base set of commands or if you use the wizard almost always the problem is on the other end but its nice to have proof.

Some thing I recommend is to not allow a VPN connection to even be set up until they fill out a form for your end that includes all the details. I will make a basic one and upload it in another post, as well as the basic CLI commands to create one if you aren't using the wizard as it is useful info to have around.

Here are a few commands that will help you debug the tunnel.

Check Phase 1 Tunnel ASA# show crypto isakmp sa detail | b [peer IP add]  Check Phase 2 Tunnel ASA# show crypto ipsec sa peer [peer IP add]  Display the PSK ASA# more system:running-config | b tunnel-group [peer IP add]  Display Uptime, etc. ASA# sh vpn-sessiondb detail l2l | b [peer IP add] ASA# show vpn-sessiondb detail l2l filter name <peer_address>  

Re-establish VPN Connection ASA# clear ipsec sa peer <remote-peer-IP>