Running 12.4(17) (c3825-advipservicesk9-mz.124-17) on a 3825 (w/VPN module) in my lab. I have a working VPN tunnel to an older 12.3 IOS router. It's a basic crypto map, so I'll no include the config. It does work. I can bring it up with interesting traffic and break it with a clear crypo session. no problems with VPN itself.
With that said, how the heck can I monitor this thing? It seems the CRYPTO-5-SESSION_STATUS (up/down) log messages are no longer being generated. I've seen several post regarding this "problem" on usenet and the web, but have found no answer why it's gone and what may be the alternative, if any.
I just need a way to monitor these tunnels. The CRYPTO-5-SESSION_STATUS messages was the only way I knew of.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...