Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.
During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.
We apologize for the inconvenience while we perform important updates to the Community.
If I understand correctly, you want to use the 800 router as a Hardware client?
If so, you can check this link:
The 800 router can accept remote IPsec connections (IPsec server), or act as an IPsec client to initiate a tunnel to an IPsec server. (This is what EzVPN is all about).
Then, check out this one:
The above is for IPsec connections.
For IPsec you can go with the old way of configuring or using VTIs:
You might want to check what I mentioned above.
If phase 1 is getting established:
sh cry isa sa
If there's nothing, verify that you have connectivity from the client to the IP of the Router you're trying to VPN to.
If phase 1 is established, verify phase 2:
sh cry ipsec sa
After that, the tunnel should established and traffic should pass. If not, we should see where the problem is.
this is the output of crypto isakmp sa and crypto ipsec sa
IPv4 Crypto ISAKMP SA
dst src state conn-id status
IPv6 Crypto ISAKMP SA
R1 # sh crypto ipsec sa
You're not getting any output.
Can you PING the router from the VPN client? (connectivity)?
If connectivity is fine, make sure that the output of those debugs are being sent to your output screen (telnet, console, etc.)
If you don't have connectivity from the client to the router we need to go back....
This is no VPN problem, since you're not even getting there...
Why is that you have no connectivity between the client and server has to be the first thing to resolve here.
Is it your client? Your ISP? Something in between?