I set up my VPN on a Cisco router 1711 running IOS 12.2(15)ZL1. Everything works fine but I need to log incoming ESP packets from the client, otherwise the router does not respond to those packets.
permit esp any host 220.127.116.11 NO RESPONSE permit esp any host 18.104.22.168 log WORKS
I wonder why "log" is required. Thanks for any hints.