Hello @philclemens1835, It not possible to install a IOS software version on ASR920 which can support Subinterfaces ? ... View more

Hi erwindebrouwer, Here is the output : interface: Outside Crypto map tag: azure-crypto-map, seq num: 1, local addr: 213.136.126.130 access-list azure-vpn-acl extended permit ip 10.128.128.0 255.255.254.0 10.5.0.0 255.255.0.0 local ident (addr/mask/prot/port): (10.128.128.0/255.255.254.0/0/0) remote ident (addr/mask/prot/port): (10.5.0.0/255.255.0.0/0/0) current_peer: 40.115.32.14 #pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0 #pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0 #pkts compressed: 0, #pkts decompressed: 0 #pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0 #pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0 #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0 #TFC rcvd: 0, #TFC sent: 0 #Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0 #send errors: 0, #recv errors: 0 local crypto endpt.: 213.136.126.130/0, remote crypto endpt.: 40.115.32.14/0 path mtu 1500, ipsec overhead 74(44), media mtu 1500 PMTU time remaining (sec): 0, DF policy: copy-df ICMP error validation: disabled, TFC packets: disabled current outbound spi: D52D8822 current inbound spi : 0217F51C inbound esp sas: spi: 0x0217F51C (35124508) SA State: active transform: esp-aes-256 esp-sha-hmac no compression in use settings ={L2L, Tunnel, IKEv1, } slot: 0, conn_id: 204541952, crypto-map: azure-crypto-map sa timing: remaining key lifetime (kB/sec): (97200000/3590) IV size: 16 bytes replay detection support: Y Anti replay bitmap: 0x00000000 0x00000001 outbound esp sas: spi: 0xD52D8822 (3576530978) SA State: active transform: esp-aes-256 esp-sha-hmac no compression in use settings ={L2L, Tunnel, IKEv1, } slot: 0, conn_id: 204541952, crypto-map: azure-crypto-map sa timing: remaining key lifetime (kB/sec): (97200000/3590) IV size: 16 bytes replay detection support: Y Anti replay bitmap: 0x00000000 0x00000001 ... View more