If your IPSec tunnel terminates on a tunnel (VTI) interface, yes. If it terminates on a crypto map, the only way I can think of to do it is to use Netflow monitoring on the physical interface and capture ESP traffic between the peers.
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.