Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Testing VPN tunnel

I changed the external address of my 515 last night as part of an ISP change. Now my remote 501 can't establish the tunnel that was previously there. I changed the "isakmp key **********addresess x.x.x.x netmask 255.255.255.255" and " crypto map transam # set peer x.x.x.x" commands to match the new ip address but still doesn't work. Any idea what I'm missing. Also, what commands can I use to check that there's traffic thru my tunnel. Thanks in advance.

Jamie

1 REPLY
New Member

Re: Testing VPN tunnel

to check the phase1

type

sho debug isa sa

for phase 2

sho debug ipsec sa

see how many packets were encrypted or decrypted.

266
Views
0
Helpful
1
Replies