You can use Cisco's website to find out about 3850's features:cisco.com/go/fn HTH,Patryck Dumit

Devang,First tunnel (ISAKMP - phase 1) both sides initiates and agree on terms they'll use (as described in figure). At this point, if any config that must be the same on both sides are different, then your VPN won't be established.Second tunnel (IPS...