hi andy,
thanks for replying
here is the output of " sh crypto ipsec sa "
-----------------------------------------------------
MBIL_ROUTER#sh crypto ipsec sa
interface: Serial0/0
Crypto map tag: clientmap, local addr. 202.54.85.229
local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
remote ident (addr/mask/prot/port): (192.168.1.50/255.255.255.255/0/0)
current_peer: 202.71.153.1
PERMIT, flags={}
#pkts encaps: 0, #pkts encrypt: 0, #pkts digest 0
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify 0
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0, #pkts decompress failed: 0
#send errors 0, #recv errors 0
local crypto endpt.: 202.54.85.229, remote crypto endpt.: 202.71.153.1
path mtu 1500, media mtu 1500
current outbound spi: 904B88D8
inbound esp sas:
spi: 0x90219026(2418118694)
transform: esp-3des esp-sha-hmac ,
in use settings ={Tunnel, }
slot: 0, conn id: 2000, flow_id: 1, crypto map: clientmap
sa timing: remaining key lifetime (k/sec): (4608000/3438)
IV size: 8 bytes
replay detection support: Y
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0x904B88D8(2420869336)
transform: esp-3des esp-sha-hmac ,
in use settings ={Tunnel, }
slot: 0, conn id: 2001, flow_id: 2, crypto map: clientmap
sa timing: remaining key lifetime (k/sec): (4608000/3393)
IV size: 8 bytes
replay detection support: Y
outbound ah sas:
outbound pcp sas:
-----------------------------------------------------
will i be able to connect to remote vpn site from my office network. Or my machine needs a public ip for communication.
one of my friend tried to connect to the same VPN site and he is able to ping the ethernet interface secondary ip of the remote router.
