cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
351
Views
0
Helpful
0
Replies

Ipsec Over GRE tunnel not comming up

Router6#show interfaces tunnel 1
Tunnel1 is up, line protocol is down
Hardware is Tunnel
Internet address is 192.168.204.6/30
MTU 17940 bytes, BW 100 Kbit/sec, DLY 50000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation TUNNEL, loopback not set
Keepalive not set
Tunnel linestate evaluation down - linestate mode reg down
Tunnel source 192.70.191.15 (GigabitEthernet0/1), destination 174.47.40.66
Tunnel Subblocks:
src-track:
Tunnel1 source tracking subblock associated with GigabitEthernet0/1
Set of tunnels with source GigabitEthernet0/1, 1 member (includes iterators), on interface <OK>
Tunnel protocol/transport IPSEC/IP
Tunnel TTL 255
Tunnel transport MTU 1500 bytes
Tunnel transmit bandwidth 8000 (kbps)
Tunnel receive bandwidth 8000 (kbps)
Tunnel protection via IPSec (profile "KORE_IPSEC_Profile")
Last input 5d00h, output 1d15h, output hang never
Last clearing of "show interface" counters 6d04h
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 3
Queueing strategy: fifo
Output queue: 0/0 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
1 packets input, 94 bytes, 0 no buffer
Received 0 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
83 packets output, 10064 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
#################

crypto keyring KOREkeyring
pre-shared-key address 174.47.40.66 key XYZ 
!
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
lifetime 3600
crypto isakmp profile KORE_ISKMP_Profile
keyring KOREkeyring
match identity address 174.47.40.66 255.255.255.255
!
!
crypto ipsec transform-set KOREVPN_TRANS esp-aes 256
mode tunnel
!
crypto ipsec profile KORE_IPSEC_Profile
set transform-set KOREVPN_TRANS
set pfs group2
set isakmp-profile KORE_ISKMP_Profile
!

0 Replies 0
Review Cisco Networking for a $25 gift card