Re: ASA site-to-site VPN problem

Can you tell which flows (Source IP/Port Dest/IP/Port) are working and which
aren't'?

Regards

Farrukh

On Mon, Jun 1, 2009 at 11:08 AM, Bogdan Sass <bogdan.sass_at_catc.ro> wrote:

> Farrukh Haroon wrote:
>
>> Also you should ignore the packet-tracer output and check the 'show cyrpto
>> ipsec sa' output on both sides.
>> Are the encr/decr counters incrementing adequately?
>>
> ] Yes, but there is no way of telling what kind of traffic is hitting the
> counters (as I was saying, some of the traffic makes it through, and some
> doesn't).
>
>
> --
> Bogdan Sass
> CCAI,CCSP,JNCIA-ER,CCIE #22221 (RS)
> Information Systems Security Professional
> "Curiosity was framed - ignorance killed the cat"

Blogs and organic groups at http://www.ccie.net
Received on Mon Jun 01 2009 - 11:14:03 ART