esp-null transform-set query

[John Pong]

I was testing esp-null as configured in a transform-set in IOS under the impression that the payload will not be encrypted however I am unable to view the payload in clear-text.

I just wanted to know if payload can be seen in clear-text since esp-null does not perform encryption. An example would be of good help. TIA

[Karsten Iwen]

you are right with the assumption that with esp-null, the payload will be in clear-text. How do you try to look at that cleartext?

[John Pong]

I am looking at the pcap capture between the two VPN devices but I am unable to see the type of traffic underneath those ESP packets. I'm not sure if it was just the config or something else beyond my comprehension. Thanks!

[Karsten Iwen]

Did you tell Wireshark to decode ESP-null packets? This option is found under Preferenes -> Protocols -> ESP.