Traffic thru IPsec tunnel

joseph.yuffa · ‎04-18-2008

Hi,

How can I check whether traffic is going through tunnel? Tunnel is up and running. When I ping remote end private IP, no replies. ICMP is allowed on PIX. See attached config.

gbudd12345 · ‎04-21-2008

show crypto isakmp sa will give you counters for packets that are encrypted and decrypted.

--Gavin Budd

husycisco · ‎04-22-2008

Hi Joseph,

You can use packet-tracer command for achieving what you want.

Regards

ankurs2008 · ‎04-22-2008

Hi

From your local LAN IP towards the remote LAN ip (mentioned in the Crypto acl), give a continous ping and parallely run the command "debug icmp trace" and "debug crypto isakmp sa "

joseph.yuffa · ‎04-22-2008

Hi,

What the full syntax of the command? I've tried packet-tracer ? on PIX and it came with nothing.

Thanks.

joseph.yuffa · ‎04-22-2008

Hi,

What is the full command syntax? I've tried 'packet-tracer ?' on PIX and it came back with nothing. Thanks.

husycisco · ‎04-23-2008

Joseph,

packet-tracer input inside tcp aninsidehostIP 3389 remotesitehostIP 3389 detailed