Hi Tacack

If you add a route on the client and ping is working. Did you check, the
packet is encrypted using "sh crypto ipsec sa"? The traffic might be going
clear text.

With regards
Kings

On Mon, Jul 26, 2010 at 7:46 PM, Vybhav Ramachandran <[email protected]>wrote:

> Hello Kings,
>
> Yes , i'm doing non-VTI ezvpn.
>
> In case of "CLIENT" mode, after i connect. I see a route on the server for
> the leased ip address, but nothing on the client router.
>
> Now, when i check the IPSEC SA, it shows that it's between the leased ip (
> loopback 10000 ) interface and the remote subnet . But when i try and ping
> the remote subnet from the client, i'm unable to ping it. It starts working
> after i add a static route on the client.
>
> Cheers,
> TacACK
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to