VPN debug

[ledasilva]

Hi,

I have a VPN established between two sites, i see that the VPN establishes well but i am unable to comunicate with the other site.

What i wanted to know is if there is any command to debug traffic coming through this VPN so i can try to figure out the problem.

I have other VPNs established in the same router and they work fine.

Thanks

[spremkumar]

hi

can you revert whether you have created an ACL matching the interesting traffic to be encrypted ?

Also did u bind the ACL under the crypto map ? if possible do post out the configs of both the routers with public ips and passwords masked..

regds

[m.sir]

try command

show crypto ipsec sa

Important are encaps and decaps counters

#pkts encaps: 2745435, #pkts encrypt: 2745435,

#pkts decaps: 3386320, #pkts decrypt: 3386320,

It helps you check if some traffic goes through your VPN if counter is 0 is some configuration problem (NAT, ACL....)