Troubleshooting a Cisco Router VPN tunnel

Posted on 2004-08-12
Last Modified: 2010-04-17
I'm having a challenge troubleshooting a 1 way VPN tunnel terminating at my Cisco 3620 router and customers Checkpoint Firewall. After debugging the crypto I know the tunnel is built and I can successfully send ICMP traffic into their internal network, however TCP traffic doesn’t flow. The customer indicates he doesn’t see TCP traffic hitting his Firewall. I have 2 other VPN connections built in a similar configuration and they work fine TCP and ICMP. I've run out of ideas.
Question by:ubergenius
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 13

Accepted Solution

td_miles earned 100 total points
ID: 11789171
Assuming that you have an access-list to define interesting traffic to be encrypted, enable logging of the ACL, then see if the traffic you are attempting to send is matching the acl (and hence being encrypted on your ends).

Also ensure that the ACL's that you are using match identically on both ends.
LVL 50

Expert Comment

by:Don Johnston
ID: 15651278
No comment has been added to this question in more than 21 days, so it is now classified as abandoned..
I will leave the following recommendation for this question in the Cleanup topic area:

RECOMMENDATION: Delete - No Refund

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

EE Cleanup Volunteer

Featured Post

Save the day with this special offer from ATEN!

Save 30% on the CV211 using promo code EXPERTS30 now through April 30th. The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
DHCP Server 14 110
Access-List 15 63
Change "enable" password on Cisco Router 7 55
how to know if a router is connected to a certain port 9 47
In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question