Which devices are used to terminate the VPNs at both ends? If these are routers and you are seeing the traffic go to the LAN on one side but not the other, then it might be that the crypto ACLs are misconfigured at one side or the other...or both for that matter. If there are ASAs that are terminating the VPN then it could either be the crypto ACLs or a misconfigured NAT exempt statement.
Are you sure that the tunnel is up?
show crypto isakmp sa
Please rate any helpful posts
Please remember to rate and select a correct answer
Yeah the tunnel is up, this has been verified. Traffic is currently passing through this tunnel without any problems, except for one port. I can see traffic coming from HostA to Hostb on UDP port 10000 match on an ACL I have on the internal interface, as well as the same traffic from HostA to HostB matching on the Crypto ACL with destination port UDP 10000.
But on the reciver, I have an ACL, that is looking for matching traffic from HostA to HostB on destination port UDP, outbound on the internal interface, and no matches can be seen. Although on several other Tunnels that are terminated on the HostB router, I can see matched perfectly fine.
It's really rather strange, I have verified no ACL issues either...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...