Hi guys, I'm doing a POC for S2S VPN but i cannot get it to work, I'm sure this is a simple thing i have overlooked, a ping from PC2 to PC1, the ping is encapsulated and encrypted ESP on the way over to PC1, but the return traffic is not..... i have the following topology; Now i have set up a site to site VPN from the PA to R2 with the following attributes; And with a ping from PC2 to PC1, IKE phase 1 and 2 come up.....but the ping fails And the capture of the ping....outbound ESP, return traffic ICMP... Confi on the Cisco router; ! crypto isakmp policy 1 encr aes authentication pre-share group 2 lifetime 3600 crypto isakmp key cisco address 192.168.3.2 ! ! crypto ipsec transform-set Myset esp-aes esp-sha-hmac ! crypto map Mymap 1 ipsec-isakmp set peer 192.168.3.2 set transform-set Myset match address 100 ! ! ! interface FastEthernet0/0 ip address 192.168.3.100 255.255.255.0 duplex auto speed auto crypto map Mymap ! ! access-list 100 permit ip 172.16.2.0 0.0.0.255 172.16.1.0 0.0.0.255 access-list 100 permit ip 172.16.1.0 0.0.0.255 172.16.1.0 0.0.0.255 ! Any ideas guys?
... View more