By: Steve
Thanks for the reply. first of all the the static route can be removed that I know but it should not interfer with the config rigth? The tunnel does not come up it stays down. And I get the error which...
View ArticleBy: BlogAdmin
can you send us a debug output. Use "<strong>debug crypto isakmp</strong>" and then clear the VPN tunnel using: <strong>clear crypto isakmp sa</strong> <strong>clear...
View ArticleBy: Steve
Ok Blogadmin thanks very much for the time and support. I figured out what the problem was. When configured as it should with the correct acl for the crypto map, the vpn stayed down until I generated...
View ArticleBy: Aline
I would like to know if someone already configured a VPN with two links balanced. How can I configure if the interfaces were FastEthernet, because I can´t configure multilink and I´ll have two ip...
View ArticleBy: Dave
There should not be any problem to configure VPN if the two interfaces were fastethernet
View ArticleBy: Kunal
I have followed this guide as well as several others and setup both my routers according to them but for some reason I cannot see any connection when I do show crypto isakmp sa. I have tried sending...
View ArticleBy: Kunal
This is the config for the above mentioned question: version 12.3 service timestamps debug uptime service timestamps log uptime service password-encryption ! hostname Router_A ! boot-start-marker...
View ArticleBy: Blog Admin
My friend you have not followed exactly the configuration as shown on my post. You must exclude the vpn traffic from nat. ip nat inside source list acl_nat interface Ethernet0/0 overload
View ArticleBy: Kunal
Admin, Thanks for the quick reply. I would like to say I am brand new to Cisco IOS so please forgive my stupidity (past or future). I added the entry on both routers and still have no activity. The...
View ArticleBy: SamAwatif
Man Many Many Thanks, I was Confused as to how to go about Allowing IPsec Tunnel While using NAT Since IPsec traffic can’t be natted, I’ve read other blogs but coudn’t get my head around it but your...
View ArticleBy: BlogAdmin
You must have identical but mirrored access lists on the two end ipsec routers. If on the first router you have “permit ip 192.168.1.0 0.0.0.255 10.1.1.0 0.0.0.255″ then on the second router you must...
View ArticleBy: Steve
Hi thnx for the response. I have the correct acl in de crypto mapand they are mirrored, but still I get the error “No peer struct to get peer description” And it only works when I set the acl to permit...
View ArticleBy: BlogAdmin
Steve, Can you please post the part of your configuration related to the ipsec vpn? I need to see it in order to help you. Thanks
View ArticleBy: Steve
Router-A version 12.4 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname Router A ! boot-start-marker boot-end-marker resource policy !...
View ArticleBy: BlogAdmin
The only strange thing on your configuration is the static route on RouterB which points to an internal host: ip route 172.16.10.2 255.255.255.255 FastEthernet0/1 The above is not required. Other than...
View ArticleBy: Gagan
im very new to cisco Can you help me on this i have to configure site to site vpn with 2 cisco router. Router A using ADSL internet connection (Dynamic IP Address, ADSL modem lan port connected to fe0)...
View ArticleBy: Blog Admin
Gagan, Although its not officially supported to have ipsec vpn between two dynamic-IP peers, see the following link which might help you. https://supportforums.cisco.com/thread/343363
View ArticleBy: Tim
Hi i followed the instructions, once i got UP-Idle, once i cleared the session the status went from negotiating to DOWN and i keep getting: No peer struct to get peer description can you please shed...
View ArticleBy: Blog Admin
Tim, This might have to do with your VPN ACL which is applied in the crypto map. The two VPN ALCs on the two sites must be exactly mirror of each other. Post the config here to take a look. Harris
View ArticleBy: Tim
Hi Harris, Thanks, for the quick replay, even Cisco Tac wouldn’t had responded so fast I’m sure your way works well, but after going back and forth all day, i chose a different path and it does not...
View Article