Cannot VPN

[pochlikimhun]

Can anyone help? I cannot VPN Province Branches to HQ. I already use IPSec Tunnel

[M02@rt37]

Hello @pochlikimhun 

On routers where the crypto map is configured, I don't see crypto isakmp key 'KEY' address 'PEER-ADDRESS' command ....

Also on HQ/R1-core active router, the peer address on the crypto map is an IP on Province/ISP-P1 router... not an IP on Province/R1-CORE.....

[pochlikimhun]

Yes Sir, Crypto Key is located in R1-Core-Active (HQ) and P1-Core (Province). I also change peer but not work.

[pochlikimhun]

Is it ok with ISR4331 on IPSEC Tunnel in Packet Tracer?

[pochlikimhun]

Router P1-Core (Province) can ping to Server Zone (HQ) but its internal VLAN cannot ping.

[pochlikimhun]

I might work sir, I changed some configuration.

[M02@rt37]

@pochlikimhun 

What do you have changed ?

[pochlikimhun]

Yes sir, I changed some configuration but still not working now. Right now router P1-Province can ping to Server zone excepted Province Host. I don't know what the point missed. Please help check my file again.