Result of the command: "sh crypto ipsec sa" interface: WAN Crypto map tag: WAN_map, seq num: 160, local addr: DFC_ISP access-list WAN_160_cryptomap permit ip DFC_LAN 255.255.255.0 Passau_LAN 255.255.255.0 local ident (addr/mask/prot/port): (DFC_LAN/255.255.255.0/0/0) remote ident (addr/mask/prot/port): (Passau_LAN/255.255.255.0/0/0) current_peer: Passau_ISP #pkts encaps: 17590, #pkts encrypt: 17590, #pkts digest: 17590 #pkts decaps: 11979, #pkts decrypt: 11979, #pkts verify: 11979 #pkts compressed: 0, #pkts decompressed: 0 #pkts not compressed: 17590, #pkts comp failed: 0, #pkts decomp failed: 0 #pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0 #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0 #send errors: 0, #recv errors: 0 local crypto endpt.: DFC_ISP, remote crypto endpt.: Passau_ISP path mtu 1500, ipsec overhead 58, media mtu 1500 current outbound spi: D17898A4 inbound esp sas: spi: 0x217E0C47 (561908807) transform: esp-3des esp-sha-hmac none in use settings ={L2L, Tunnel, PFS Group 2, } slot: 0, conn_id: 56, crypto-map: WAN_map sa timing: remaining key lifetime (kB/sec): (3823077/21689) IV size: 8 bytes replay detection support: Y outbound esp sas: spi: 0xD17898A4 (3514341540) transform: esp-3des esp-sha-hmac none in use settings ={L2L, Tunnel, PFS Group 2, } slot: 0, conn_id: 56, crypto-map: WAN_map sa timing: remaining key lifetime (kB/sec): (3824189/21689) IV size: 8 bytes replay detection support: Y Crypto map tag: WAN_map, seq num: 40, local addr: DFC_ISP access-list WAN_40_cryptomap permit ip DFC_LAN 255.255.255.0 Minden_LAN 255.255.255.0 local ident (addr/mask/prot/port): (DFC_LAN/255.255.255.0/0/0) remote ident (addr/mask/prot/port): (Minden_LAN/255.255.255.0/0/0) current_peer: Minden_ISP #pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0 #pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0 #pkts compressed: 0, #pkts decompressed: 0 #pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0 #pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0 #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0 #send errors: 0, #recv errors: 0 local crypto endpt.: DFC_ISP, remote crypto endpt.: Minden_ISP path mtu 1500, ipsec overhead 58, media mtu 1500 current outbound spi: 72658C90 inbound esp sas: spi: 0x5CAF26A9 (1554982569) transform: esp-3des esp-sha-hmac none in use settings ={L2L, Tunnel, } slot: 0, conn_id: 39, crypto-map: WAN_map sa timing: remaining key lifetime (kB/sec): (3825000/17603) IV size: 8 bytes replay detection support: Y outbound esp sas: spi: 0x72658C90 (1919257744) transform: esp-3des esp-sha-hmac none in use settings ={L2L, Tunnel, } slot: 0, conn_id: 39, crypto-map: WAN_map sa timing: remaining key lifetime (kB/sec): (3825000/17603) IV size: 8 bytes replay detection support: Y Crypto map tag: WAN_map, seq num: 20, local addr: DFC_ISP access-list WAN_20_cryptomap permit ip DFC_LAN 255.255.255.0 BadOeynhausen_LAN 255.255.255.0 local ident (addr/mask/prot/port): (DFC_LAN/255.255.255.0/0/0) remote ident (addr/mask/prot/port): (BadOeynhausen_LAN/255.255.255.0/0/0) current_peer: BadOeynhausen_ISP #pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0 #pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0 #pkts compressed: 0, #pkts decompressed: 0 #pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0 #pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0 #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0 #send errors: 0, #recv errors: 0 local crypto endpt.: DFC_ISP, remote crypto endpt.: BadOeynhausen_ISP path mtu 1500, ipsec overhead 58, media mtu 1500 current outbound spi: DB20C9BE inbound esp sas: spi: 0x68A8369E (1755854494) transform: esp-3des esp-sha-hmac none in use settings ={L2L, Tunnel, PFS Group 1, } slot: 0, conn_id: 55, crypto-map: WAN_map sa timing: remaining key lifetime (sec): 5047 IV size: 8 bytes replay detection support: Y outbound esp sas: spi: 0xDB20C9BE (3676359102) transform: esp-3des esp-sha-hmac none in use settings ={L2L, Tunnel, PFS Group 1, } slot: 0, conn_id: 55, crypto-map: WAN_map sa timing: remaining key lifetime (sec): 5047 IV size: 8 bytes replay detection support: Y