I ran into a issue today that is bugging me. I'm running a GRE IPSec tunnel from my hub site to a spoke router. In the router I created an access list referencing the Inside global addresses on both sides of the tunnel (Running NAT) and ran debug ip packet and referenced the access list. I did not see any traffic from the access list in my log. All I saw was some crypto ipsec entries in the log which were not from my access list. Maybe my access list is wrong in referncing the Inside global addresses as the source and destination? I've also turned off CEF switching (no ip cef). IPSec is running in transport mode.
