I am trying to bring up an IPSec tunnel between an ASR1002 and a 2821. The tunnel itself works. Only the 2821 shows hits against its access list. Only the 2821 shows packets being encrypted with no decrypted packets.
I purchased the firewall and IPSec license for the ASR. My understanding is that the license is only honorary and no special software is required. I purchased the 10 G encryption processor.
Is there something special on the ASR that needs to be done to get the ASR to start encrypting? Are there any examples?