Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Why my crypto map-ipsec is not working?

Hi Experts,

I have configured a gre tunneling but seems like not able to bring up the ipsec connection.

The debug as attached.

What have i done wrong?

thanks,

cindy

1 REPLY
Hall of Fame Super Silver

Re: Why my crypto map-ipsec is not working?

Hello Lee,

you need to use an ACL with a statement like

access-list 111 permit gre host host 172.30.1.6

to define interesting traffic to be encrypted

on the other side a mirrored ACL is needed like:

access-list 112 permit gre host 172.30.1.6 host

Hope to help

Giuseppe

104
Views
0
Helpful
1
Replies