Thanks for the quick reply.
Here is the output from IOS device.
Showing encap on one site with no decap and opposite on other end.
-----------------
InternetVPN-ASA# show crypto ipsec sa peer 124.xx.xx.xx
peer address: 124.xx.xx.xx
Crypto map tag: outside-1Gb_dyn_map, seq num: 30, local addr: xx.xx.xx.xx
access-list outside-1Gb_cryptomap_65535.30 extended permit ip 10.1.0.0 255.255.254.0 10.1.169.0 255.255.255.0
local ident (addr/mask/prot/port): (10.1.0.0/255.255.254.0/0/0)
remote ident (addr/mask/prot/port): (10.1.169.0/255.255.255.0/0/0)
current_peer: 124.xx.xx.xx
#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 505, #pkts decrypt: 505, #pkts verify: 505
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0
local crypto endpt.: xx.xx.xx.xx/500, remote crypto endpt.: 124.xx.xx.xx/500
path mtu 1500, ipsec overhead 78(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: 2493DCDA
current inbound spi : E108DB72
inbound esp sas:
spi: 0xE108DB72 (3775454066)
SA State: active
transform: esp-aes-256 esp-sha-256-hmac no compression
in use settings ={L2L, Tunnel, IKEv2, }
slot: 0, conn_id: 213291008, crypto-map: outside-1Gb_dyn_map
sa timing: remaining key lifetime (kB/sec): (3916764/28496)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x2493DCDA (613670106)
SA State: active
transform: esp-aes-256 esp-sha-256-hmac no compression
in use settings ={L2L, Tunnel, IKEv2, }
slot: 0, conn_id: 213291008, crypto-map: outside-1Gb_dyn_map
sa timing: remaining key lifetime (kB/sec): (4331520/28496)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001
------------------------------------------------------
C1100#sshow ip access-lists vpn
Extended IP access list vpn
10 permit ip 10.1.169.0 0.0.0.255 10.1.0.0 0.0.1.255 (1 match)
Test#show crypto ipsec sa
interface: Cellular0/2/0
Crypto map tag: vpn, local addr 124.xx.xx.xx
protected vrf: (none)
local ident (addr/mask/prot/port): (10.1.169.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.1.0.0/255.255.254.0/0/0)
current_peer xx.xx.xx.xx port 500
PERMIT, flags={origin_is_acl,}
#pkts encaps: 654, #pkts encrypt: 654, #pkts digest: 654
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0
#pkts not decompressed: 0, #pkts decompress failed: 0
#send errors 0, #recv errors 0
local crypto endpt.: 124.xx.xx.xx, remote crypto endpt.: xx.xx.xx.xx
plaintext mtu 1438, path mtu 1500, ip mtu 1500, ip mtu idb Cellular0/2/0
current outbound spi: 0xE108DB72(3775454066)
PFS (Y/N): N, DH group: none
inbound esp sas:
spi: 0x2493DCDA(613670106)
transform: esp-256-aes esp-sha256-hmac ,
in use settings ={Tunnel, }
conn id: 2002, flow_id: ESG:2, sibling_flags FFFFFFFF80000048, crypto map: vpn
sa timing: remaining key lifetime (k/sec): (4608000/3154)
IV size: 16 bytes
replay detection support: Y
Status: ACTIVE(ACTIVE)
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0xE108DB72(3775454066)
transform: esp-256-aes esp-sha256-hmac ,
in use settings ={Tunnel, }
conn id: 2001, flow_id: ESG:1, sibling_flags FFFFFFFF80000048, crypto map: vpn
sa timing: remaining key lifetime (k/sec): (4607953/3154)
IV size: 16 bytes
replay detection support: Y
Status: ACTIVE(ACTIVE)
outbound ah sas:
outbound pcp sas:
