Thanks for helping me again. I really appreciate. I don't hve any NAT-exemptions in Cisco IOS Router. Transform-set I will change soon, but I've tried with tunnel mode and it didn't work. Maybe NAT-exemptions is the issue. Can you advice me which exemptions should be in Cisco IOS Router? Because on Cisco ASA I guess I have everything. Here is show crypto session detail router(config)#do show crypto session detail Crypto session current status Code: C - IKE Configuration mode, D - Dead Peer Detection K - Keepalives, N - NAT-traversal, T - cTCP encapsulation X - IKE Extended Authentication, F - IKE Fragmentation Interface: GigabitEthernet0/0 Session status: DOWN Peer: 22.214.171.124 port 500 fvrf: (none) ivrf: (none) Desc: (none) Phase1_id: (none) IPSEC FLOW: permit ip 192.168.17.0/255.255.255.0 192.168.83.0/255.255.255.0 Active SAs: 0, origin: crypto map Inbound: #pkts dec'ed 0 drop 0 life (KB/Sec) 0/0 Outbound: #pkts enc'ed 0 drop 0 life (KB/Sec) 0/0 Should I see something in crypto isakmp sa? pp-border#sh crypto isakmp sa IPv4 Crypto ISAKMP SA dst src state conn-id status IPv6 Crypto ISAKMP SA Thanks again for your help.
... View more
Thanks for your help. Also it's started to work after this: object network inside-network subnet 192.168.1.0 255.255.255.0 nat (inside,outside) source static inside-network inside-network destination static inside-network inside-network no-proxy-arp route-lookup
... View more