Incomplete ESP translations

tiew_lenny · ‎11-15-2007

hi, i got this issue, source coming in via Tunnel needs to be NATed to 1 pool of IPs, this Pool is then allowed in my FW to access VPN. I'm seeing this error,

Incomplete ESP translations:

0 esp_conn=0x646757C0, hanging off nat entry 0x647CB8FC.

Anyone can explain why?

=========================

interface Tunnel1

ip address 1.1.1.1 255.255.255.252

ip nat inside

interface FastEthernet0/0

ip address 2.2.2.2 255.255.255.0

ip nat outside

mj11 · ‎11-15-2007

Hi

Do you have NAT Traversal enabled on this router, which version of IOS are you running.

Regards MJ

tiew_lenny · ‎11-16-2007

hi MJ,

Nope, NAT-T not enable in the router. IOS:c7200-jk9s-mz.123-22.bin.

mj11 · ‎11-18-2007

Hi

I have check the bug tool but could not see any bugs. Have a look at the following link and see if this is any use.

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094ecd.shtml

Regards MJ