apparently you do not want to turn off the encryptoin :) so, a couple of thoughts:
MM1 messages is not reaching the hub, or reply from hub is not reaching the spoke, so problems somewhere in the path; what os version on your ASAs? not 8.3? I guess your problem is nat or acls on your ASAs -- Best regards, Andrey
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
