IPSec - crypto session is down

[vikrant.pandey@gmail.com]

Dear Tech guys ,

Please help me in establishing IPSec tunnel b/w 2 RTRs as the config screenshots are included, my crypto session is DOWN .

[Rahul Govindan]

Apply crypto map to the sub-interface.

[vikrant.pandey@gmail.com]

Sir thanks for replying and I will do it , but can you plz. Tell why crypto
map need to in sub interface , while any policy for main interface is also
the same for the sub interfaces, like speed etc ?

[Rahul Govindan]

Speed and other parameters etc is set to the physical interface. Crypto map is applied to any logical interface that you create. When you create a sub-interface, you are essentially splitting the physical interface in multiple logical interfaces. Each interface acts as its own, so all the policies, ip addresses are applied directly to it.