Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

Traffic thru IPsec tunnel

Hi,

How can I check whether traffic is going through tunnel? Tunnel is up and running. When I ping remote end private IP, no replies. ICMP is allowed on PIX. See attached config.

6 REPLIES
New Member

Re: Traffic thru IPsec tunnel

show crypto isakmp sa will give you counters for packets that are encrypted and decrypted.

--Gavin Budd

Re: Traffic thru IPsec tunnel

Hi Joseph,

You can use packet-tracer command for achieving what you want.

Regards

New Member

Re: Traffic thru IPsec tunnel

Hi

From your local LAN IP towards the remote LAN ip (mentioned in the Crypto acl), give a continous ping and parallely run the command "debug icmp trace" and "debug crypto isakmp sa "

New Member

Re: Traffic thru IPsec tunnel

Hi,

What the full syntax of the command? I've tried packet-tracer ? on PIX and it came with nothing.

Thanks.

New Member

Re: Traffic thru IPsec tunnel

Hi,

What is the full command syntax? I've tried 'packet-tracer ?' on PIX and it came back with nothing. Thanks.

Re: Traffic thru IPsec tunnel

Joseph,

packet-tracer input inside tcp aninsidehostIP 3389 remotesitehostIP 3389 detailed

128
Views
0
Helpful
6
Replies
CreatePlease to create content