topic Re: packet tracer type vpn subtype encrypt result DROP in Network Security

packet tracer type vpn subtype encrypt result DROP

clark white — Fri, 21 Feb 2020 14:19:29 GMT

Dears

i have a L2L vpn from branch to HQ and everthing works fine i am adding a new subnet in the vpn access-list exactly as per the cisco recommendation mirror access-list on both ends, But still the connection to the ISE server on port 1645 fails my branch switches are not able to reach the ISE server in HQ.

The strange part is the packet-tracer some time shows me results all ok and within a seconds if i run again it shows me vpn encrypt packet drop.

Please find the attached packet tracer output.

Re: packet tracer type vpn subtype encrypt result DROP

Flavio Miranda — Wed, 20 Sep 2017 02:42:43 GMT

Hello,

Should be nice if you put firewall config here. Only one question, does Firewall has route to the new subneteork?

Re: packet tracer type vpn subtype encrypt result DROP

clark white — Wed, 20 Sep 2017 19:18:59 GMT

i can paste the config but i have routes pretty sure for that