Output of "show crypto ipsec sa"

[david.chosrova]

Hello,

In a basic VPN l2l scenario using ezVPN, server  behind NAT device, client using 3G. What would be the reason to have in the output of the show crypto ipsec sa, a current peer different from remote crypto endpoint on the server ?

Thanks for your help.

David

[Jennifer Halim · Accepted solution]

Since it is behind a NAT device and NAT is only layer 3, and it doesn't modify any of the content of the IPSec VPN during the negotiation because it is encrypted, hence you might see current peer different from remote crypto endpoint on the server.

[david.chosrova]

Hello Jennifer,

Thanks for your reply, I was thinking about this, but was not 100% sure. :-).

Regards.

David

[Jennifer Halim]

Cheers, pls kindly mark the post as answered if you have no further question so others can learn from your post. Thank you.