Hello.
I have a Cisco 881 router, and we set up an IPSEC tunnel to another company equipment. The IPSEC tunnel is showing up and active, but I cannot ping across the tunnel. I believe the issue is with the routing, but truthfully I am not sure. Any assistance would be greatly appreciated.
Tantalus#sho cry isa sa
IPv4 Crypto ISAKMP SA
dst src state conn-id status
198.37.29.62 129.213.169.148 QM_IDLE 2107 ACTIVE
IPv6 Crypto ISAKMP SA
Tantalus#sho cry ipsec sa
interface: FastEthernet4.89
Crypto map tag: TANTALUS, local addr 198.37.29.62
protected vrf: (none)
local ident (addr/mask/prot/port): (198.37.29.60/255.255.255.252/0/0)
remote ident (addr/mask/prot/port): (129.213.169.0/255.255.255.0/0/0)
current_peer 129.213.169.148 port 500
PERMIT, flags={origin_is_acl,}
#pkts encaps: 73, #pkts encrypt: 73, #pkts digest: 73
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0
#pkts not decompressed: 0, #pkts decompress failed: 0
#send errors 0, #recv errors 0
local crypto endpt.: 198.37.29.62, remote crypto endpt.: 129.213.169.148
plaintext mtu 1438, path mtu 1500, ip mtu 1500, ip mtu idb FastEthernet4.89
current outbound spi: 0xF3E89E4C(4092108364)
PFS (Y/N): Y, DH group: group5
inbound esp sas:
spi: 0x894F1216(2303660566)
transform: esp-aes esp-sha-hmac ,
in use settings ={Tunnel, }
conn id: 13, flow_id: Onboard VPN:13, sibling_flags 80004040, crypto map: TANTALUS
sa timing: remaining key lifetime (k/sec): (4273907/86119)
IV size: 16 bytes
replay detection support: Y
Status: ACTIVE(ACTIVE)
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0xF3E89E4C(4092108364)
transform: esp-aes esp-sha-hmac ,
in use settings ={Tunnel, }
conn id: 14, flow_id: Onboard VPN:14, sibling_flags 80004040, crypto map: TANTALUS
sa timing: remaining key lifetime (k/sec): (4273906/86119)
IV size: 16 bytes
replay detection support: Y
Status: ACTIVE(ACTIVE)
outbound ah sas:
outbound pcp sas:
