site to site working fine?pleas help

shajil · ‎06-21-2009

configured site to site between two offices,one is 192.168.32.x and other lan subnet is 192.168.40.x ,

am not able to ping from one lan to other,even though the tunnel is established,even while running the show ipsec sa,i see packets encrypted and decrypted, what cud be the problem,please help,its very urgent,attaching the debugs...

Patrick0711 · ‎06-21-2009

You're not receiving or decrypting/decapsulating IPSEC packets.

Check the remote end to see if they're successfully encapsulating the IPSEC packets.

More often than not, there is a routing or port restriction issue.

Are you seeing any debug error messages when you do a 'debug crypto ipsec 7'?