Hello,
I am currently facing a recurring issue with the configuration of an IPSec VPN between a Cisco router and a Bintec router. Although the VPN tunnel appears to be functioning correctly and is displayed as "UP-Active" on both sides, no traffic is passing through. This is an urgent matter, as despite several attempts to resolve the problem, the encapsulation and encryption do not seem to be working properly.
Here’s a detailed breakdown of the situation:
VPN Status: The tunnel shows "UP-Active" on both the Cisco and Bintec routers, indicating that the connection has been successfully established.
Traffic Flow: Despite the "UP-Active" status, no traffic is successfully passing between the two subnets. Pinging from the Bintec side to the Cisco subnet appears to send the request but receives no response, while pings from the Cisco side to the Bintec subnet fail entirely.
Encapsulation and Encryption: When I try to send traffic (like a ping), neither encapsulation nor encryption seems to happen, as if the VPN is not properly securing the traffic.
exemple:
local ident (addr/mask/prot/port): (192.168.1.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (192.168.200.0/255.255.255.0/0/0)
current_peer 77.25.120.137 port 500
PERMIT, flags={origin_is_acl,}
#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0
#pkts not decompressed: 0, #pkts decompress failed: 0
#send errors 0, #recv errors 0
Routes and Policies: I have reviewed the routing tables on both routers, and the routes seem to be correctly set up. Additionally, the Access Control Lists (ACLs) and IPSec policies have been verified and should be functioning as expected.
NAT Configuration: I had previously received advice that my NAT configuration was incorrect and that I should adjust my ACLs related to NAT. Specifically, it was noted that there were multiple "overload NAT" configurations and various ACLs, which were suspected to be the cause. I’ve since adjusted the NAT setup, but the issue still persists.
Despite these configurations being reviewed and adjusted, I still encounter the same issue: the tunnel remains "UP-Active," but no traffic is exchanged between the two routers, and no data is being encapsulated or encrypted.
I would greatly appreciate any further insights, suggestions, or potential solutions from the community, as this has become quite urgent and the previous solution did not fully resolve the issue.
Thank you for your time and assistance.
Best regards,
