IPsec VPN and Policy Route

[chilun]

Hi all,

I have two offices connected by a Metro Ethernet with their LAN subnet itself, and both have their broadband access itself. The internal routing between these two sites is through Cisco router which provided by ISP. All servers are located at the main office.

Recently, I have deployed a backup server at the main office and a DR server at the remote office, then I built up an route based IPSec VPN between these two locations for the backup replication. I want these two servers can be connected by VPN instead of the Metro Ethernet. I configured policy route for both side but not working. Can anyone help?

[Bubu]

Hi,

Can you give us more info please?

Is the tunnel UP?

Tunnel is up but traffic does not go through?

 diagnose vpn ike gateway list         ->   to check if you are initiator or responder (the next steps, you must perform them on the responder side)diagnose vpn ike log-filter cleardiagnose vpn ike log-filter name <PHASE1_NAME_HERE>diagnose debug application ike -1diagnose debug enable And try to bring up.You can now analyze the error and solve the problem or send me the debug output. BR  

[chilun]

The tunnel is up. Previously, the VPN tunnel used to handle routing between this two office.

After installed Metro Ethernet, I keep the VPN tunnel for standby.