cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
360
Views
0
Helpful
1
Replies

My Site-to-Site VPN is not working - packet tracer

30082952
Level 1
Level 1

Hi everyone, I am trying to set up a site to site VPN between my HQ router and my BR-01 router, and to test the configuration I try to ping from BR-PC1 to the DC server but unfortunately it is unsuccessful, could anyone please look at my file and tell me what I am doing wrong? I have set up my static routes and everything but it still doesn't work.

30082952_0-1723281096953.png

 

1 Reply 1

@30082952 

 I dont see any error on your VPN config but if you run the command show crypto isakmp sa and show crypto ipsec sa we can not see any packet encap or decap. And if we enable debug with debug crypto ipsec and debug crypto isakmp we can not see any logs either.

 Sounds like the license for VPN  securityk9 is not enable, which is if you check with the command show version.

 

If I were you I would try to replace the router for 1900 or 1800.  PacketTracer have many bugs and ISR router 43xx is the most buggy among them all. I wouldn´t waste much time with them.