Oh the joys of SDM.....

notgoing2fail

Ok, I'll try not to make this a long post so please bear with me.

My VPN tunnel works between two routers. There is no question about it. I configured everything via CLI and was able to ping across.

I then loaded up SDM only to see that SDM seems to think my tunnel is down. I ran a "tunnel test" and it seems to think there is an issue.

So I went ahead and deleted my CLI config and configured my VPN the "SDM way" by using SDM. Again, SDM thinks the tunnel is down, but it's not. All traffic works, all show crypto commands show that the tunnel is up.

The only thing that thinks the tunnel is down is SDM. Also, I've closed SDM and relaunched it with no success, hoping a clean refresh would work with SDM, it still thinks my tunnel is down.

Attached are two of the same pictures, one small and one large.

Could anyone please take a look and let me know your thoughts? I really detest SDM. My pictures prove that pings across both ways work. Below is just a quick structure of my VPN.



(Host: 172.16.0.5)

---

(Fa1: 172.16.0.1)(Fa0: 10.0.0.1)

---

(Fa0: 10.0.0.2)(Fa1: 192.168.50.1)

---

(Host: 192.168.50.5)


Host <----> 1811 Router <----> 3620 Router <----> Host



FYI: When I run the tunnel test on the SDM and tell it to ping a host on the other side, that host actually responds because I've issued debug ip icmp, so it gets the pings and it responds. Yet SDM gives me back an error saying it cannot ping the device....so frustrating....

FYI 2: I've also tested the tunnel by initiating the pings myself manually and still receive the same error from SDM....

notgoing2fail

k2737 wrote: »

Are you always initiating traffic from the same side? I have had VPN's that would only come up when traffic was initiated from one side, and it wasn't a routing issue.

Oh no, traffic was definitley initiated and tested from both sides! That's one of the first things I did before I came here for some help....


I mean at this point, does it seem like a layer 8 issue (me) or just a bug?