we use two CISCO router 1841 to link two LAN,
the LAN1 router ,
inside ip 192.168.100.100
outside ip 10.3.13.100, gateway 10.3.13.254
the LAN2 router
inside ip 192.168.1.60
outside ip 10.3.38.100, gateway 10.3.38.1
now we create the VPN as the document.
use debug crypto isakmp, IKE phase 2 is ok.
use show crypto session, VPN is active.
use show crypto engine connections active. only have encrypt packet,donot have decrypt data.
Now the problem is external host cannot ping each other.
It is very strange, can anyone help?