Ensuring Network Connectivity

When deciding to enable IPSec in your network, the first thing you need to verify is that you have connectivity between the IPSec routers. If you do not have connectivity and begin to configure IPSec, you will eventually fail to get IPSec up and running and start the troubleshooting process. You can spend a large amount of time checking IPSec Phase 1 and Phase 2 problems, when the problem is one on connectivity issues. You can verify connectivity by pinging from one IPSec router to the other.