Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

Routing trouble with using VTI on VPN

Hi all,

I'm quite confused with Virtual Tunnel Interface (VTI) routing. I've set up VPN concentrator on Cisco 870 with VTI -- this interface is used as nat inside and it works almost fine -- TCP traffic is correctly translated, OK. But problem is with UDP traffic and maybe due the same reason doesn't work echo request from the router to VPN client.

I tried to debug packet flow:

IP: tableid=0, s= (FastEthernet4), d= (Virtual-Access2), routed via FIB

IP: s= (FastEthernet4), s= (Virtual-Access2), g=, len 225, forward

(it's reply from DNS server)

and I seems to me correct, packet is correctly translated and routed to Virtual Tunnel Interface, which should pass it to tunnel encapsulation and delivery it to the VPN client, but it ends somewhere between -- VPN client doesn't get packet, which isn't even counted in Virtual-Access interface statistics.

Any suggestions?

Thank you.

Ondrej Cecak

New Member

Re: Routing trouble with using VTI on VPN

It looks like bug to me, check this bug-id:CSCsc55056

CreatePlease to create content