[c-nsp] Site to Site VPN

[Joerg Mayer]

On Mon, Aug 09, 2010 at 01:40:14PM +0300, Mohammad Khalil wrote:
> thanks for the response 
> now man i have another issue is that the show crypto isakmp sa is showing that the tunnel is up QM_IDLE
> but i cannot ping the other side and it was working normally 
> and i see in the log message that there is "it is temporarly disabled due to recursive routing"

I've never seen this message in combination with IPSEC so far, but with
GRE that meant the system was now trying to reach the tunnel endpoint
by sending the traffic *into* the tunnel. Could be the same for this
scenario?

Ciao
    Joerg
-- 
Joerg Mayer                                           <jmayer at loplof.de>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.