Hi guys,
@Abzal
1. On HQ router there is such ACL , on branch one - as I wrote, there is RV180 so I do not have access to console, GUI only.
2., 3. and 4. VPN connection is estableshed , see later in this post.
5. Can you elaborate little bit more?
6. They are, otherwis, as far as I know, I will not be able to establish VPN connection.
@Cadet
Here you are:
#ping 10.0.100.200
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.100.200, timeout is 2 seconds:
UUUUU
Success rate is 0 percent (0/5)
#sh crypto isakmp sa
IPv4 Crypto ISAKMP SA
dst src state conn-id status
213.192.65.106 78.133.254.114 QM_IDLE 1005 ACTIVE
IPv6 Crypto ISAKMP SA
#sh crypto ipsec sa
interface: GigabitEthernet0/1
Crypto map tag: GLIWICE-MAP, local addr 213.192.65.106
protected vrf: (none)
local ident (addr/mask/prot/port): (10.0.0.0/255.255.254.0/0/0)
remote ident (addr/mask/prot/port): (10.0.100.0/255.255.255.0/0/0)
current_peer 78.133.254.114 port 500
PERMIT, flags={origin_is_acl,}
#pkts encaps: 98210, #pkts encrypt: 98210, #pkts digest: 98210
#pkts decaps: 109098, #pkts decrypt: 109098, #pkts verify: 109098
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0
#pkts not decompressed: 0, #pkts decompress failed: 0
#send errors 0, #recv errors 0
local crypto endpt.: 213.192.65.106, remote crypto endpt.: 78.133.254.114
path mtu 1500, ip mtu 1500, ip mtu idb GigabitEthernet0/1
current outbound spi: 0x3D2A55A(64136538)
PFS (Y/N): Y, DH group: group2
inbound esp sas:
spi: 0x742BA200(1949016576)
transform: esp-3des esp-md5-hmac ,
in use settings ={Tunnel, }
conn id: 2015, flow_id: Onboard VPN:15, sibling_flags 80000040, crypto map: GLIWICE-MAP
sa timing: remaining key lifetime (k/sec): (4302174/1959)
IV size: 8 bytes
replay detection support: Y
Status: ACTIVE(ACTIVE)
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0x3D2A55A(64136538)
transform: esp-3des esp-md5-hmac ,
in use settings ={Tunnel, }
conn id: 2016, flow_id: Onboard VPN:16, sibling_flags 80000040, crypto map: GLIWICE-MAP
sa timing: remaining key lifetime (k/sec): (4306937/1959)
IV size: 8 bytes
replay detection support: Y
Status: ACTIVE(ACTIVE)
outbound ah sas:
outbound pcp sas:
Thank you for your current support, guys!
