What do the routing tables look like. Have you checked each side to see if there are encryption decryption statistics.
Tyson Scott - CCIE #13513 R&S and Security Technical Instructor - IPexpert, Inc. A Cisco Learning Partner - We Accept Learning Credits! Telephone: +1.810.326.1444 Cell: +1.248.504.7309 Fax: +1.810.454.0130 Mailto: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Anshul Arora (akarora) Sent: Sunday, December 16, 2007 9:20 PM To: [email protected] Subject: [OSL | CCIE_Security] Section 14: Task 7.5 (b):Remote Access VPN on R4 Hi All, I am able to configure Easy VPN server on concentrator. Verified the configuration by connecting test PC as VPN client. Configured R4 as VPN client but ping test failed as captured below. IKE phase-1 and Phase-2 are established (sh output is attached). I'm not sure what is missing? Appreciate any suggestions/pointers. Thanks, -Anshul R4#ping 10.2.2.1 source loopback 100 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.2.2.1, timeout is 2 seconds: Packet sent with a source address of 172.16.0.1 ..... Success rate is 0 percent (0/5) R4: crypto ipsec client ezvpn EZGroup group EZGroup key abcd1234 mode network-extension peer 192.168.5.5 acl 176 username EZUser password ccie1234 xauth userid mode local interface Loopback100 ip address 172.16.0.1 255.255.0.0 ip nat inside crypto ipsec client ezvpn EZGroup inside interface Serial0/0/0 ip nat outside crypto ipsec client ezvpn EZGroup access-list 175 deny ip 172.16.0.0 0.0.255.255 10.2.2.0 0.0.0.255 access-list 175 deny ip 192.168.22.0 0.0.0.255 10.2.2.0 0.0.0.255 access-list 175 permit ip 172.16.0.0 0.0.255.255 any access-list 176 permit ip 172.16.0.0 0.0.255.255 10.2.2.0 0.0.0.255 ip nat inside source list 175 interface Serial0/0/0 overload
