Re: [c-nsp] IPSec problems

2010-09-28 Thread omar parihuana
Hi, The router 1721 is an older router, could you check the CPU in the 1721, and check the BW usage in the ADSL side. Rgds. On Tue, Sep 28, 2010 at 8:35 AM, Stephane MAGAND wrote: > Hi > > i have a new problems with my IPSec tunnels ... > > Two routers: > > Cisco 2821 with AIM connected in Fa

Re: [c-nsp] IPSec problems

2010-09-28 Thread John Kougoulos
Hello, you can use "show crypto ipsec sa detail" and check the counters. Maybe you need to increase the "replay window-size". see: http://www.cisco.com/en/US/docs/ios/12_3t/12_3t14/feature/guide/gt_iarwe.html If you can't find what is wrong, try also to switch to tunnel mode, just in case this

Re: [c-nsp] IPSec problems

2010-09-28 Thread Heath Jones
Is the link at the remote side of the IPsec tunnel saturated? > but when i ping using Ipsec tunnel : > C2821#ping vrf VPN003 10.11.12.254 size 600 repeat 150 > Type escape sequence to abort. > Sending 150, 600-byte ICMP Echos to 10.11.12.254, timeout is 2 seconds: > .!!....

[c-nsp] IPSec problems

2010-09-28 Thread Stephane MAGAND
Hi i have a new problems with my IPSec tunnels ... Two routers: Cisco 2821 with AIM connected in FastEthernet at Internet Cisco 1721 connected in Adsl. When i ping from 2821 to 1721 and use public internet address no problems: C2821#ping 84.xx.xx.1 size 600 repeat 150 Type escape sequence to