Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

LAN-to-LAN VPN IKE SAs

Hi,

I have a LAN-to-LAN VPN setup between a Cisco VPN 3030 Concentrator [A]and a 2621 router [B] with AIM card. Sometimes, when clearing the existing session on both ends and initiating a new one I notice the following on the router:

Router#show crypto isa sa

dst src state conn-id slot

B A QM_IDLE 30 0

A B QM_IDLE 31 0

Which combination of source and destination is valid? I have also noticed that the IPSec session is unstable when the Concentrator tends to be the destination for the IKE session as seen on the router.

Thanks,

RAJ

1 REPLY
New Member

Re: LAN-to-LAN VPN IKE SAs

I have the same setup (VPN 3030 to 2621), and it shows:

router concentrator QM_IDLE XX XX

140
Views
0
Helpful
1
Replies
CreatePlease to create content