Hi Jennifer, thanks for your help.
here's the result of the show crypto ipse sa:
This is after pinging from host 192.168.1.18 to host 192.168.235.9
==========
HQ-ASA04# sh crypto ipsec sa
interface: outside
Crypto map tag: OUTSIDE_MAP, seq num: 10, local addr: 10.10.10.2
access-list L2L_CR_INTERESTING_TRAFFIC extended permit ip 192.168.1.0 255.255.255.0 host 1.1.1.1
local ident (addr/mask/prot/port): (192.168.1.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (1.1.1.1/255.255.255.255/0/0)
current_peer: 10.10.10.1
#pkts encaps: 2, #pkts encrypt: 2, #pkts digest: 2
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 2, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0
local crypto endpt.: 10.10.10.2/0, remote crypto endpt.: 10.10.10.1/0
path mtu 1500, ipsec overhead 58, media mtu 1500
current outbound spi: 9286DBF9
current inbound spi : 315BF1D3
inbound esp sas:
spi: 0x315BF1D3 (828109267)
transform: esp-3des esp-md5-hmac no compression
in use settings ={L2L, Tunnel, PFS Group 2, }
slot: 0, conn_id: 139264, crypto-map: OUTSIDE_MAP
sa timing: remaining key lifetime (kB/sec): (4374000/3584)
IV size: 8 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001
outbound esp sas:
spi: 0x9286DBF9 (2458311673)
transform: esp-3des esp-md5-hmac no compression
in use settings ={L2L, Tunnel, PFS Group 2, }
slot: 0, conn_id: 139264, crypto-map: OUTSIDE_MAP
sa timing: remaining key lifetime (kB/sec): (4373999/3584)
IV size: 8 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001
===========================
ROUTER
local ident (addr/mask/prot/port): (1.1.1.1/255.255.255.255/0/0)
remote ident (addr/mask/prot/port): (192.168.1.0/255.255.255.0/0/0)
current_peer 10.10.10.2 port 500
PERMIT, flags={origin_is_acl,}
#pkts encaps: 28, #pkts encrypt: 28, #pkts digest: 28
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0
#pkts not decompressed: 0, #pkts decompress failed: 0
#send errors 7, #recv errors 0
local crypto endpt.: 10.10.10.1, remote crypto endpt.: 10.10.10.2
path mtu 1500, ip mtu 1500, ip mtu idb GigabitEthernet0/0
current outbound spi: 0x315BF1D3(828109267)
inbound esp sas:
spi: 0x9286DBF9(2458311673)
transform: esp-3des esp-md5-hmac ,
in use settings ={Tunnel, }
conn id: 3079, flow_id: NETGX:79, crypto map: GigabitEthernet0_0_map
sa timing: remaining key lifetime (k/sec): (4574303/3105)
IV size: 8 bytes
replay detection support: Y
Status: ACTIVE
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0x315BF1D3(828109267)
transform: esp-3des esp-md5-hmac ,
in use settings ={Tunnel, }
conn id: 3029, flow_id: NETGX:29, crypto map: GigabitEthernet0_0_map
sa timing: remaining key lifetime (k/sec): (4574303/3105)
IV size: 8 bytes
replay detection support: Y
Status: ACTIVE
outbound ah sas:
outbound pcp sas:
protected vrf: (none)
