Accepted Solutions
Hello and thanks for the reply.
I have removed the filter and still no luck. Packet Tracer fails on VPN - It says Type-VPN Subtype-encrypt Action - Drop. When I source the packet from an IP from the other two working networks, it goes though just fine.
The two networks that work are 10.239.192.0 /25 and 10.195.64.0 /24. The network that does not work is 10.239.192.128 /25.
peer address: Meridian-Primary-VPN
Crypto map tag: Outside_map, seq num: 1, local addr: Outside_Interface
access-list Outside_cryptomap_1 permit ip 10.195.64.0 255.255.255.0 Maridian-Primary-Net 255.255.255.128
local ident (addr/mask/prot/port): (10.195.64.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (Maridian-Primary-Net/255.255.255.128/0/0)
current_peer: Meridian-Primary-VPN
#pkts encaps: 231, #pkts encrypt: 231, #pkts digest: 231
#pkts decaps: 231, #pkts decrypt: 231, #pkts verify: 231
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 231, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0
local crypto endpt.: Outside_Interface, remote crypto endpt.: Meridian-Primary-VPN
path mtu 1500, ipsec overhead 58, media mtu 1500
current outbound spi: 21A739AD
inbound esp sas:
spi: 0xBD2B4623 (3173729827)
transform: esp-3des esp-md5-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 4096, crypto-map: Outside_map
sa timing: remaining key lifetime (kB/sec): (4373985/24494)
IV size: 8 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x21A739AD (564607405)
transform: esp-3des esp-md5-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 4096, crypto-map: Outside_map
sa timing: remaining key lifetime (kB/sec): (4373985/24494)
IV size: 8 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001
Crypto map tag: Outside_map, seq num: 1, local addr: Outside_Interface
access-list Outside_cryptomap_1 permit ip 10.239.192.0 255.255.255.128 Maridian-Primary-Net 255.255.255.128
local ident (addr/mask/prot/port): (10.239.192.0/255.255.255.128/0/0)
remote ident (addr/mask/prot/port): (Maridian-Primary-Net/255.255.255.128/0/0)
current_peer: Meridian-Primary-VPN
#pkts encaps: 144, #pkts encrypt: 144, #pkts digest: 144
#pkts decaps: 144, #pkts decrypt: 144, #pkts verify: 144
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 144, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0
local crypto endpt.: Outside_Interface, remote crypto endpt.: Meridian-Primary-VPN
path mtu 1500, ipsec overhead 58, media mtu 1500
current outbound spi: 6A38F471
inbound esp sas:
spi: 0xEF5B3FE3 (4015734755)
transform: esp-3des esp-md5-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 4096, crypto-map: Outside_map
sa timing: remaining key lifetime (kB/sec): (4373991/24484)
IV size: 8 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x6A38F471 (1782117489)
transform: esp-3des esp-md5-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 4096, crypto-map: Outside_map
sa timing: remaining key lifetime (kB/sec): (4373991/24484)
IV size: 8 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001
