Lab Minutes Forum

Technical Discussion => Security => Topic started by: Administrator on November 08, 2016, 05:36:33 PM

Title: I need your help on this video SEC0015 (On behalf of Olushola)
Post by: Administrator on November 08, 2016, 05:36:33 PM

I watched this video "LabMinutes# SEC0015 - Cisco Router Easy VPN (EZVPN) with Pre-Shared Key and Hardware Client" and follow the steps one after the other. The Head-end and  Hardware Client were configured correctly and Nat translation is also working as I debug the packet. PC behind Hardware Client is not getting reply but the Head-end Hardware Client are seeing the echo reply and Nat translation. Please what do you think can cause this problem while my PC is not receiving echo reply. I look forward to from you. Thanks a lot

Title: Re: I need your help on this video SEC0015 (On behalf of Olushola)
Post by: Administrator on November 08, 2016, 05:38:44 PM

Please do 'sh cry ipsec sa' and check encrypt packet on headend. If it's 0, check return traffic routing. If non-0, do the same on remote router and see if you see decrypt packets.