Site to Site VPN between a pair of Netvanta 3140 w/EFP

[normandifrancis]

I am trying to set up a site to site VPN between a pair of Netvanta 3140s but cant seem to get the tunnel up. Routers are named HUB and SPOKE respectively. I have attached the configs for both routers. It is my plan to moved the VPN to the internet, but to simplify things; i am attempting to simply create the VPN tunnel wit the routers physically connected to each other over interface gig 0/3 and using IPs 172.15.16.1 and 172.15.16.1 simulating their public interfaces. I have created loopback interfaces 10.0.1.1 and 1.0.2.1 respectively for local subnet connectivity. Can anyone shed some light on this for me please?

[mick]

I've only had a quick look, but from what you show you have configured an access list to select packets between LAN subnets, but you have not defined a policy class to allow them through;  e.g.:

ip policy-class Private

  allow list VPN-10-vpn-selectors stateless

!

ip policy-class Public

  allow reverse list VPN-10-vpn-selectors stateless

Also, you do not show a policy class for your loopback or other interfaces (private/public).

[normandifrancis]

Thank Mick. I got it running, used a GRE tunnel and encypted the same also added the policies to the interfaces.