Lately, when I enter the " sh crypto isakmp sa" command it returns nothing but the screen headers dst-----src-------state------pending------created. I know the two tunnels I are working becuse I can access the networks on the other side and visa versa. Why is there no tunnel info showing?
it is possible that the rekey has not gone through successfully. What you normally see here is the isa sa or isa tunnel. If that is the case, eventually the ipsec tunnel would time out.
See if your re-negotiation times matches.
Regards,
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.