Traffic thru IPsec tunnel

[joseph.yuffa]

Hi,

How can I check whether traffic is going through tunnel? Tunnel is up and running. When I ping remote end private IP, no replies. ICMP is allowed on PIX. See attached config.

[gbudd12345]

show crypto isakmp sa will give you counters for packets that are encrypted and decrypted.

--Gavin Budd

[husycisco]

Hi Joseph,

You can use packet-tracer command for achieving what you want.

Regards

[ankurs2008]

Hi

From your local LAN IP towards the remote LAN ip (mentioned in the Crypto acl), give a continous ping and parallely run the command "debug icmp trace" and "debug crypto isakmp sa "

[joseph.yuffa]

Hi,

What the full syntax of the command? I've tried packet-tracer ? on PIX and it came with nothing.

Thanks.

[joseph.yuffa]

Hi,

What is the full command syntax? I've tried 'packet-tracer ?' on PIX and it came back with nothing. Thanks.

[husycisco]

Joseph,

packet-tracer input inside tcp aninsidehostIP 3389 remotesitehostIP 3389 detailed