Re: ASA site-to-site VPN problem

Farrukh Haroon wrote:
> Also you should ignore the packet-tracer output and check the 'show
> cyrpto ipsec sa' output on both sides.
>
> Are the encr/decr counters incrementing adequately?
] Yes, but there is no way of telling what kind of traffic is hitting
the counters (as I was saying, some of the traffic makes it through, and
some doesn't).

-- 
Bogdan Sass
CCAI,CCSP,JNCIA-ER,CCIE #22221 (RS)
Information Systems Security Professional
"Curiosity was framed - ignorance killed the cat"
Blogs and organic groups at http://www.ccie.net