Hello Kindly;Check the following config(VPN Virtual Tunel Interface) for me RA Router-A#sh run Building configuration... Current configuration : 1706 bytes ! version 12.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router-A ! boot-start-marker boot-end-marker ! enable password cisco ! no aaa new-model ! resource policy ! memory-size iomem 5 ip subnet-zero ! ! ip cef no ip domain lookup no ip dhcp use vrf connected ! ! no ip ips deny-action ips-interface ! no ftp-server write-enable ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! crypto isakmp policy 10 encr aes authentication pre-share group 2 crypto isakmp key 6 cisco123 address 193.1.1.1 no-xauth no crypto isakmp ccm ! ! crypto ipsec transform-set ali esp-aes esp-sha-hmac ! crypto ipsec profile VTI ! ! ! ! interface Tunnel0 ip address 192.168.3.1 255.255.255.0 tunnel source 192.1.1.1 tunnel destination 193.1.1.1 tunnel mode ipsec ipv4 tunnel protection ipsec profile VTI ! interface FastEthernet0/0 ip address 192.168.1.1 255.255.255.0 duplex auto speed auto ! interface Serial1/0 no ip address shutdown serial restart-delay 0 no dce-terminal-timing-enable ! interface Serial1/1 ip address 192.1.1.1 255.255.255.0 serial restart-delay 0 no dce-terminal-timing-enable ! interface Serial1/2 no ip address shutdown serial restart-delay 0 no dce-terminal-timing-enable ! interface Serial1/3 no ip address shutdown serial restart-delay 0 no dce-terminal-timing-enable ! no ip http server no ip http secure-server ip classless ip route 192.168.2.0 255.255.255.0 Tunnel0 ! ! ! ! ! ! control-plane ! ! ! ! ! ! ! ! ! alias exec s sh ip interface brief ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 line vty 0 4 password cisco login ! ! end RB# ROUTER-B#sh run Building configuration... Current configuration : 1876 bytes ! version 12.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname ROUTER-B ! boot-start-marker boot-end-marker ! enable password cisco ! no aaa new-model ! resource policy ! memory-size iomem 5 ip subnet-zero ! ! ip cef no ip domain lookup no ip dhcp use vrf connected ! ! no ip ips deny-action ips-interface ! no ftp-server write-enable ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! crypto isakmp policy 10 encr aes authentication pre-share group 2 crypto isakmp key 6 cisco123 address 192.1.1.1 no-xauth no crypto isakmp ccm ! ! crypto ipsec transform-set ali esp-aes esp-sha-hmac ! crypto ipsec profile VTI ! ! ! ! interface Tunnel0 ip address 192.168.3.2 255.255.255.0 tunnel source 193.1.1.1 tunnel destination 192.1.1.1 tunnel mode ipsec ipv4 tunnel protection ipsec profile VTI ! interface Ethernet0/0 ip address 192.168.2.1 255.255.255.0 half-duplex ! interface Ethernet0/1 no ip address shutdown half-duplex ! interface Ethernet0/2 no ip address shutdown half-duplex ! interface Ethernet0/3 no ip address shutdown half-duplex ! interface Serial1/0 no ip address shutdown serial restart-delay 0 no dce-terminal-timing-enable ! interface Serial1/1 no ip address shutdown serial restart-delay 0 no dce-terminal-timing-enable ! interface Serial1/2 ip address 193.1.1.1 255.255.255.0 serial restart-delay 0 no dce-terminal-timing-enable ! interface Serial1/3 no ip address shutdown serial restart-delay 0 no dce-terminal-timing-enable ! no ip http server no ip http secure-server ip classless ip route 192.168.1.0 255.255.255.0 Tunnel0 ! ! ! ! ! ! control-plane ! ! ! ! ! ! ! ! ! alias exec s sh ip interface brief ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 line vty 0 4 password cisco login ! ! end ROUTER-B# ROUTER-B#sh crypto isakmp sa dst src state conn-id slot status