IPSec transport mode with VTI doesn`t work

thorsten.w · ‎12-03-2008

I want to modify a working IPSev via VTI connection. At the moment i use the following Config for the transform set.

crypto ipsec transform-set VPN-TUNNEL ah-sha-hmac esp-aes 256

Now i want to use the transport mode and altered the config to:

crypto ipsec transform-set VPN-TUNNEL ah-sha-hmac esp-aes 256

mode transport

My problem is, with this modification IPSec doesn't work!

I know that the difference between Transport and Tunnel mode is only observable when the source and destination of the traffic (e.g. Ping) is at the tunnel endpoints.

thorsten.w · ‎12-03-2008

I attached the Config-File to give show the enviroment.

I hope someone can give me some help.

kevin.hayes · ‎02-10-2009

I thought VTI only supports tunnel mode.