In general the encapsulation failed error message indicates that the router has a layer 3 packet to forward and is lacking some element of the layer 2 header that it needs to be able to forward the packet toward the next hop.
In situations where the next hop is over Ethernet it usually indicates that the ARP request did not get an adequate response and that it does not have the destination MAC address. In Frame Relay it usually indicates that there is not a map entry that gives the correct DLCI for the outbound packet. Other encapsulations have similar header components which must be known or an encapsulation failure will result.
What type of interface is the DPD message being forwarded over?
The DPD messages were configured. The problem is that the router cannot send data via the encrypted tunnel. When i do "debug ip packet" on the router I see the "encapsulation failed" message for the packets going out of the router.
If it is Ethernet, then the encapsulation failed is almost certainly an issue with the MAC address of the next hop. To troubleshoot this I would suggest that you take the encapsulation failed error message, verify the destination address of the packet that failed, check the routing table for how you get to that destination address and what is the next hop, and then check the ARP table for that address. Somewhere in the process I suspect that there is a mismatch.
Since I do not have a good feeling right now for what the problem is, it is difficult to say for sure that it is not a problem with the router to switch connection or the configuration of the access port or VLAN on the 2950. But I would doubt that this is causing the problem.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...