term lan 0 ^ % Invalid input detected at '^' marker. HUB-A#show hard Cisco IOS Software, C2600 Software (C2600-ADVIPSERVICESK9-M), Version 12.3(11)T10, RELEASE SOFTWARE (fc4) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2006 by Cisco Systems, Inc. Compiled Fri 03-Mar-06 18:02 by dchih ROM: System Bootstrap, Version 12.2(8r) [cmong 8r], RELEASE SOFTWARE (fc1) HUB-A uptime is 18 hours, 55 minutes System returned to ROM by power-on System image file is "flash:c2600-advipservicesk9-mz.123-11.T10.bin" This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. Cisco 2611XM (MPC860P) processor (revision 0x200) with 127308K/3764K bytes of memory. Processor board ID JAE07490EK9 (271047372) M860 processor: part number 5, mask 2 2 FastEthernet interfaces 32K bytes of NVRAM. 32768K bytes of processor board System flash (Read/Write) Configuration register is 0x2002 HUB-A#show run Building configuration... Current configuration : 1979 bytes ! version 12.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname HUB-A ! boot-start-marker boot-end-marker ! ! no network-clock-participate slot 1 no network-clock-participate wic 0 no aaa new-model ip subnet-zero no ip cef ! ! ! ! ip ips po max-events 100 no ftp-server write-enable ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! crypto keyring dynamic_spokes pre-shared-key address 0.0.0.0 0.0.0.0 key HUBA ! crypto isakmp policy 1 encr 3des authentication pre-share group 2 lifetime 21600 crypto isakmp keepalive 10 10 no crypto isakmp ccm crypto isakmp profile dynamic description Dynamic spoke router connections keyring dynamic_spokes match identity address 0.0.0.0 no keepalive ! crypto ipsec security-association idle-time 300 ! crypto ipsec transform-set vpn-set-1 esp-3des esp-md5-hmac ! crypto dynamic-map dynamic 3 set security-association idle-time 60 set transform-set vpn-set-1 set isakmp-profile dynamic ! ! crypto map vpn 1000 ipsec-isakmp dynamic dynamic ! ! ! ! interface Tunnel2 description Primary Tunnel to SpokeA bandwidth 1024 ip unnumbered Loopback0 ip tcp adjust-mss 1340 keepalive 10 3 tunnel source Loopback1 tunnel destination 172.20.66.40 bridge-group 1 ! interface Loopback0 ip address 172.25.210.1 255.255.255.255 ! interface Loopback1 ip address 172.20.66.1 255.255.255.255 ! interface FastEthernet0/0 description Connection to Internet ip address 101.0.0.1 255.255.255.252 speed 100 full-duplex crypto map vpn ! interface FastEthernet0/1 description Connection to HUB-B [B2B] ip address 10.0.0.2 255.255.255.0 speed 100 full-duplex no keepalive bridge-group 1 ! ip classless ip route 0.0.0.0 0.0.0.0 101.0.0.2 ! ! ip http server no ip http secure-server ! ! route-map REVERSE-ROUTE permit 10 match tag 100 ! ! ! control-plane ! bridge 1 protocol ieee ! ! ! ! ! ! ! ! line con 0 line aux 0 line vty 0 4 privilege level 15 no login ! ! end HUB-A#show bridge 1 Total of 300 station blocks, 300 free Codes: P - permanent, S - self Bridge Group 1: HUB-A#show bridge ver HUB-A#show bridge verbose Total of 300 station blocks, 300 free Codes: P - permanent, S - self Flood ports (BG 1) RX count TX count FastEthernet0/1 58 0 Tunnel2 0 58 HUB-A#debug tunnel keepalive Tunnel keepalive debugging is on HUB-A#term mon HUB-A# *Mar 2 03:24:52.926: Tunnel2: sending keepalive, 172.20.66.40->172.20.66.1 (len=24 ttl=255), counter=1 *Mar 2 03:24:52.934: Tunnel2: keepalive received, 172.20.66.40->172.20.66.1 (len=24 ttl=253), resetting counter *Mar 2 03:25:02.927: Tunnel2: sending keepalive, 172.20.66.40->172.20.66.1 (len=24 ttl=255), counter=1 *Mar 2 03:25:02.935: Tunnel2: keepalive received, 172.20.66.40->172.20.66.1 (len=24 ttl=253), resetting counter HUB-A#u all All possible debugging has been turned off HUB-A#