01-10-2018 09:48 AM - edited 03-03-2019 08:42 AM
Hi,
Status is up protocol is down not sure what is wrong in the config any guidance here?
ASR920
SW version is
Cisco IOS XE Software, Version 16.06.01
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0/1 192.168.30.18 YES NVRAM up up
Virtual-Template1 192.168.30.18 YES unset up down
config.
------------------
crypto isakmp policy 2
encr aes
authentication pre-share
group 14
crypto isakmp keepalive 10
crypto isakmp nat keepalive 20
!
crypto isakmp client configuration group vpnclient
key cisco
dns 8.8.8.8
domain test.com
pool ippool
acl 101
crypto isakmp profile vpn1-ra
match identity group vpnclient
client authentication list userauthen
isakmp authorization list groupauthor
client configuration address respond
virtual-template 1
!
!
crypto ipsec transform-set myset esp-aes 256 esp-sha-hmac
mode tunnel
!
!
crypto ipsec profile test-vti1
set transform-set myset
set isakmp-profile vpn1-ra
!
interface Virtual-Template1 type tunnel
ip unnumbered GigabitEthernet0/0/1
tunnel mode ipsec ipv4
tunnel protection ipsec profile test-vti1
ip virtual-reassembly
access-list 101 permit ip 1.1.1.0 0.0.0.255 192.168.100.0 0.0.0.255
Solved! Go to Solution.
01-10-2018 05:44 PM
Hi
This is normal, when you connect through VPN, you should see a virtual-access interface coming up/up. This new dynamic interface is created based on virtual-template config.
Are you able to VPN connect ?
01-10-2018 05:44 PM
Hi
This is normal, when you connect through VPN, you should see a virtual-access interface coming up/up. This new dynamic interface is created based on virtual-template config.
Are you able to VPN connect ?
10-12-2021 09:05 PM
VA comes up/up but why VT still remains up/down?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide