cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1213
Views
0
Helpful
3
Replies

IPsec VPN not working

xx__hh
Level 1
Level 1

I am trying to implement ipsec vpn in my network but when i type in the command show crypto isakmp sa, nothing is displayed. But when i do show run it shows the ipsec configurations on the interface as it should be. I have attached a text file containing the commands i entered to implement vpn on both routers and also a screenshot of my network. I have been stuck on this for the past few days, i would appreciate some immediate help.

3 Replies 3

Hi,

The configuration you provided seems ok.

How are you testing? You would need to send traffic from R1 network 192.168.4.x to R3's network 192.168.8.x to force the routers to establish a VPN tunnel.

What is the purpose of ACL 101? It would not be used in the VPN

 

Hi i am testing by using the show crypto isakmp sa and also by looking at
the frame in simulation mode. But everything looks normal so far.

Network Keith
Level 1
Level 1

show crypto isakmp sa  will show you tunnel info once traffic is sent like so:

 

R5#sho cry is sa
IPv4 Crypto ISAKMP SA
dst src state conn-id status
169.254.100.5 169.254.100.2 QM_IDLE 1018 ACTIVE
169.254.100.1 169.254.100.5 QM_IDLE 1019 ACTIVE

 

 

 

LabFW1(config)# sho cry is sa

IKEv1 SAs:

Active SA: 1
Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 1

1 IKE Peer: 1.1.1.3
Type : L2L Role : responder
Rekey : no State : MM_ACTIVE

 

 

Ping the encrypted traffic between both sites then check the command