The Cisco ASA 5510 is on code 9.1(2). The Meraki is a MX100 that is brand new and being setup for the first time. Phase 1 is establishing but it appears it is not even attempting Phase 2 so while it is showing up no traffic is passing. Apr 17 12:25:15 Non-Meraki / Client VPN negotiation msg: ISAKMP-SA established ****[500]-****[500] spi:152245679cb0e554:3a66f483f91c3683 Apr 17 12:25:15 Non-Meraki / Client VPN negotiation msg: initiate new phase 1 negotiation: *****[500]<=>****[500] I have the same subnets on both sides. NAT-T has been turned off on the ASA and exempt ASA side host/network from address translation Phase 1 Encryption AES 256 Authentication SHA1 Diffie-Hellman group 2 Lifetime (seconds)28800 Phase 2 Encryption 3DES Authentication SHA1 PFS group Off Lifetime (seconds)28800 Contacted support but they are trying to blame the subnets even though they are the same on each side. Any help or thoughts would be appreciated.
... View more