|reply to Gramzster |
Re: Need a Little help with Easy VPN
On the 800 series config, I would start with confirming the accuracy of the shared key. Make sure it's the same as on the 2600.
try some trouble shooting commands on both routers. While doing so, do a continuous ping from a machine inside the client network to one inside the destination network. Here's a few show and debugs.
ON THE 2600
debug crypto engine - This will give you the status and details of your key exchange.
debug crypto isakmp - Will show debug data on the policy matching, and the setup of IPSEC Security Associations.
debug crypto ipsec - Will show you if your the setup of your SA's were successful.
show crypto isakmp sa - To view isakmp Security Associations
show crypto ipsec sa - To view IPsec Security Associations
clear crypto sa - Clear the Sa's then do the previous two show commands again to see fresh data. Clear after making changes to the config to see how it effects the crypto.
Another thing to consider is just using router to router VPN between the 800 and 2600 series.