Configuration Guide 7. IPSec Tunneling
Version 7.2 39 Security Setup
Note the output of the capture with the "ipsec" keyword, which allows viewing encrypted
traffic:
debug capture data interface gigabitethernet 0/0 ipsec proto all
host 180.1.1.1
Note that traffic is upon the GRE tunnel:
debug capture data interface gigabitethernet 0/0 ipsec proto all
host 180.1.1.1
tcpdump: verbose output suppressed, use -v or -vv for full
protocol decode
listening on ipsec2, link-type EN10MB (Ethernet), capture size 96
bytes
10:21:06.709636 00:90:8f:59:4b:56 > 00:90:8f:89:35:a9, ethertype
IPv4 (0x0800), length 98: 180.1.1.1 > 180.1.1.2: GREv0, proto IPv4
(0x0800), length 64: 192.168.11.1 > 192.168.1.1: ICMP echo
request, id 27378, seq 1, length 40
10:21:06.710405 00:90:8f:89:35:a9 > 00:90:8f:59:4b:56, ethertype
IPv4 (0x0800), length 98: 180.1.1.2 > 180.1.1.1: GREv0, proto IPv4
(0x0800), length 64: 192.168.1.1 > 192.168.11.1: ICMP echo reply,
id 27378, seq 1, length 40
10:21:07.702933 00:90:8f:59:4b:56 > 00:90:8f:89:35:a9, ethertype
IPv4 (0x0800), length 98: 180.1.1.1 > 180.1.1.2: GREv0, proto IPv4
(0x0800), length 64: 192.168.11.1 > 192.168.1.1: ICMP echo
request, id 27378, seq 2, length 40
10:21:07.703292 00:90:8f:89:35:a9 > 00:90:8f:59:4b:56, ethertype
IPv4 (0x0800), length 98: 180.1.1.2 > 180.1.1.1: GREv0, proto IPv4
(0x0800), length 64: 192.168.1.1 > 192.168.11.1: ICMP echo reply,
id 27378, seq 2, length 40
10:21:08.703879 00:90:8f:59:4b:56 > 00:90:8f:89:35:a9, ethertype
IPv4 (0x0800), length 98: 180.1.1.1 > 180.1.1.2: GREv0, proto IPv4
(0x0800), length 64: 192.168.11.1 > 192.168.1.1: ICMP echo
request, id 27378, seq 3, length 40
10:21:08.704280 00:90:8f:89:35:a9 > 00:90:8f:59:4b:56, ethertype
IPv4 (0x0800), length 98: 180.1.1.2 > 180.1.1.1: GREv0, proto IPv4
(0x0800), length 64: 192.168.1.1 > 192.168.11.1: ICMP echo reply,
id 27378, seq 3, length 40
10:21:09.702894 00:90:8f:59:4b:56 > 00:90:8f:89:35:a9, ethertype
IPv4 (0x0800), length 98: 180.1.1.1 > 180.1.1.2: GREv0, proto IPv4
(0x0800), length 64: 192.168.11.1 > 192.168.1.1: ICMP echo
request, id 27378, seq 4, length 40