Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
1014
Views
0
Helpful
2
Replies

IPSec transport mode with VTI doesn`t work

thorsten.w
Level 1
Level 1

‎12-03-2008 07:55 AM - edited ‎02-21-2020 04:03 PM

I want to modify a working IPSev via VTI connection. At the moment i use the following Config for the transform set.

crypto ipsec transform-set VPN-TUNNEL ah-sha-hmac esp-aes 256

Now i want to use the transport mode and altered the config to:

crypto ipsec transform-set VPN-TUNNEL ah-sha-hmac esp-aes 256

mode transport

My problem is, with this modification IPSec doesn't work!

I know that the difference between Transport and Tunnel mode is only observable when the source and destination of the traffic (e.g. Ping) is at the tunnel endpoints.

Labels:
0 Helpful
2 Replies 2

thorsten.w
Level 1
Level 1

‎12-03-2008 11:43 PM

I attached the Config-File to give show the enviroment.

I hope someone can give me some help.

Preview file
2 KB
0 Helpful

kevin.hayes
Level 1
Level 1

‎02-10-2009 03:59 AM

I thought VTI only supports tunnel mode.

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents