Ikev2 site to site vpn between pa and cisco asa

[msdphi]

temporary security measures for all users.

msdphi
Messages
Notifications

(English) USA
Get Started
Discussions
Blogs
Articles
Products
Tools
Education Services
Member Recognition
Podcasts
Customer
Partner
Employee
ikev2 site to site VPN between PA and ASA
Search this content
Panorama D
ikev2 site to site VPN between PA

Hi All,

I have a site to site VPN configured to client's ASA.

The VPN stays stable until the phase 2 lifetime expires and then never comes up until interesting traffic is generated from client(ASA) side. If i generate traffic from the pa side, the tunnel doesn't come up.

On checking the PA logs, I see a couple of errors "IKE protocol notification message received: received notify type NON_FIRST_FRAGMENTS_ALSO" and "IKE protocol notification message received: received notify type ESP_TFC_PADDING_NOT_SUPPORTED' )".

All the parameters on both sides are the same. Please help me. Need your advice here.