Easy vpn initialization problem

[sqambera]

Hi,

I had been going through the document at the following url for easy vpn client configuration:

http://www.cisco.com/en/US/products/hw/routers/ps221/prod_configuration_guide09186a008007cfa7.html#wp100722

I am trying to deploy a Cisco 1841 router as easy vpn client whearas a Cisco 3845 router has already been configured as vpn server. The issue is that when after doing the configuration on vpn client (as in the document in url) I try to use the command

router(config)# crypto ipsec client ezvpn connect <ezvpn-name> | <cr>}

I don't see the option "connect" while configuring the above command in my router. Rather I can only write command:

" crypto ipsec client ezvpn <vpn name> "

So I am having problem connecting the easy vpn client to easy vpn server. IOS ver of my router is 12.3(8r)T9.

[kamal-learn]

hi

try to write the command:

" crypto ipsec client ezvpn " and hit enter , you will get under another mode, at that moment chose (connect) with auto|manual options.

Good luck

do rate if it does help

[sqambera]

hi,

Thanks for replying. I did as you said. It accepts the command " connect auto " but when i check the status through " sh crypto isakmp sa " command there is nothing. I think it does not initialize the vpn connection. However i have tested the configuration of vpn server by connecting throug vpn client software which works. thans.

[kamal-learn]

hi

the tunnel will be built only when there is an interresting traffic, so may be you need to specify your interresting traffic, with classical config is created by the access-list that you specify under your crypto map.

HTH

[sqambera]

hi,

what i know so far is that interesting traffic through access list is not defined in easy vpn configuration. However in case of Site-to-Site vpn, yes we define. isn't ?? Thanks.

[mohammed.ibrahim]

crypto ipsec client ezvpn connect is in privilege mode not in config mode

[GustavoKaiya]

Really is. But usually this command is used when you have configured "connect manual", then every time that have a new tunnel you should apply it. But probaly the issue is other.