cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1091
Views
0
Helpful
2
Replies

show crypto isakmp sa printout

valjaza
Level 1
Level 1

 Hi there Cisco community.

 

I need some help!

 

I am implementing a site to site IPSEC/GRE VPN , testing it in GNS3 , and after configuring all the IPSEC parameters on both headend devices, also creating a GRE tunnel, when it comes to the show/verify printouts, the "show crypto isakmp sa"command printout displays the the same ip addresses for the destination and source devices. I have rechecked many times and I am petty sure I have done the right configurations both sites. NAT is also configured at the both edge devices.
When I test the same configuration in Packet Tracer, I receive the expected source and destination at the "show crypto isakmp sa"command printout. Can anyone give any suggestion at what might it be the problem? 

 

The printout shown below is taken from configurations at the GNS3 platform.

 

Branch_RT# SH CRYpto ISakmp SA

dst             src             state          conn-id slot status

200.x.x.11  200.x.x.28  QM_IDLE              1    0 ACTIVE

 

HQ_RT# sh crypto isakmp sa

dst             src             state          conn-id slot status

200.x.x.11  200.x.x.28  QM_IDLE              1    0 ACTIVE

 

2 Replies 2

Mark Malone
VIP Alumni
VIP Alumni
Sounds like a bug in GNS3 if its working in PT there is non reason it shouldn't work in GNS3 same config , these are only emulators so there is multiple bugs , don't waste your time trying to figure it out if its working PT , you could try another ios version as a test , you can upload the 2 configs I can check them if you want too but sounds like there already good

valjaza
Level 1
Level 1

Thank you Mark for the quick response. I was thinking the same, probably a bug on the GNS3 platform. I'll try to run the same config in another IOS router. 

v