Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

DMVPN - Zero packets decrypted/decaps in One Side

Hi,

 

I am configuring a DMPN between my Headquarter and my Branch.

Tunnel GRE has a tunnel protection applied, Phase1 is OK:

 

RCIAO07#sh crypto isakmp sa
IPv4 Crypto ISAKMP SA
dst             src             state               conn-id status
x.x.x.x       y.y.y.y      QM_IDLE           1005 ACTIVE

 

But in Phase2, I see this problem:

My headquarter Router send packets through IPSec Tunnel, but My Branch Router does not receive.

 

HeadQuarter Router

################################

RCISPO01#sh crypto ipsec sa | inc encaps|decaps
    #pkts encaps: 13, #pkts encrypt: 13, #pkts digest: 13
    #pkts decaps: 9, #pkts decrypt: 9, #pkts verify: 9

################################

 

Branch Router

################################

RCIAO07#sh crypto ipsec sa | inc encaps|decaps
    #pkts encaps: 9, #pkts encrypt: 9, #pkts digest: 9
    #pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0

 

Someone could help me in this troubleshooting ?

 

Best Regards,

Daniel Stefani

Everyone's tags (1)
2 REPLIES
New Member

As I can see traffic passing

As I can see traffic passing from spoke to the hub without any issue. So I think it is not ipsec issue, it may be caused by NHRP or route mis-configuration.

You can check  the route entry to this spoke on HUB, what is the next hop, then check how to get the next hop by checking NHRP mapping(what is the global address to reach this spoke's next-hop address).

 

New Member

My Border Router where I was

My Border Router where I was implementing DMVPN was  PATing  IPSec Ports to my ASA Firewall inside the Network.

When I removed this PAT, the problem was resolved.

 

thanks,

Daniel Stefani

265
Views
0
Helpful
2
Replies