IPSec Site to Site VPN no ISAKMP

[HarryES]

Hi,

I have a cisco 887 and a cisco 881 and I am trying to set up an IPSec tunnel between the two.

It doesnt look like I am getting any ISAKMP negotiations between the two.

The policies are the same on both sides and the crypto map ACL are mirroring eachother, but still no negotiation.

Can anybody assist?

[GRANT3779]

I think at minimum you are going to need some ACL entries on each end allowing the following -

permit esp host x.x.x.x host y.y.y.y
permit udp host x.x.x.x host y.y.y.y eq isakmp
permit udp host x.x.x.x host y.y.y.y eq non500-isakmp

Replacing with your own IP addresses. The ACL will be inbound on the Outside Interface.

[Joseph W. Doherty]

Crypto maps - do your devices support VTI tunnels?