query on 7100-vpn site-site

[connect]

Hi,

We have a cisco 7100 series router with VPN capability running Version 12.2(13)T5.We have a number of site-site tunnels terminated on this.

We use the command ,

"show crypto isakmp sa" to check whether a particular tunnel is up or not.Sometimes we dont see an entry for any specific site-site tunnel using this command,but we could see the packets getting encrypted through this tunnel using the command,

"show crypto ipsec sa" and the connectivity is also fine.

Can anyone pls let me know why it is not showing the tunnel status even when the connectivity is ok and let me know the exact command to see whether a tunnel is up or down.

Thanks..

[drolemc]

The best way to check if the tunnel is up is to use the trace command. Instead of giving you all the intermediate hops, you will be able to see only the first and last hop.

[spremkumar]

Hi

I just got to c u r mail ,hope this command show crypto engine connections active helps a bit which will display the active connections details with encrypted/decrypted packet counters..

regs

prem