Thanks! for attention
sory but i don't know where i'm missing i tried the exact config before and work perfectly.
with the primary acl the route table seems ok, but no traffic s well
sh crypto ipsec sa
interface: Virtual-Access2
Crypto map tag: Virtual-Access2-head-0, local addr 64.30.154.85
protected vrf: (none)
local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
remote ident (addr/mask/prot/port): (172.16.255.13/255.255.255.255/0/0)
current_peer 41.78.17.170 port 45422
PERMIT, flags={origin_is_acl,}
#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0
#pkts not decompressed: 0, #pkts decompress failed: 0
#send errors 0, #recv errors 0
local crypto endpt.: 64.30.154.85, remote crypto endpt.: 41.78.17.170
path mtu 1500, ip mtu 1500, ip mtu idb FastEthernet0/1.10
current outbound spi: 0xD6DAB211(3604656657)
inbound esp sas:
spi: 0xFECA5FF6(4274675702)
transform: esp-aes esp-sha-hmac ,
in use settings ={Tunnel UDP-Encaps, }
conn id: 2037, flow_id: FPGA:37, crypto map: Virtual-Access2-head-0
sa timing: remaining key lifetime (k/sec): (4408813/3227)
IV size: 16 bytes
replay detection support: Y
Status: ACTIVE
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0xD6DAB211(3604656657)
transform: esp-aes esp-sha-hmac ,
in use settings ={Tunnel UDP-Encaps, }
conn id: 2038, flow_id: FPGA:38, crypto map: Virtual-Access2-head-0
sa timing: remaining key lifetime (k/sec): (4408813/3226)
IV size: 16 bytes
replay detection support: Y
Status: ACTIVE
outbound ah sas:
outbound pcp sas:
