ASA 5505 VPN Tunnel Drops

[wattie29]

Hello All,

Have a LAN to LAN VPN tunnel configured between a Cisco ASA 5505 and a Cisco 877 router. I am tunneling three subnets down the tunnel and all is working fine.

Except that at least once a day the link will drop for approx. 1 hour and then recover itself. It only happens on one subnet at a time so it is not a connectivity issue.

Anyone got any ideas?

 

[desperado618]

Are there any SA's for this tunnel during that time?
sh crypto ipsec sa peer <peer ip>

Are there any time or data limits on the tunnel?
sh ru crypto | <peer ip> look for kb or time settings

Are other vpns affected?

If your syslogs do not provide any useful information, consider turning on Phase I and Phase II debugging during that down time.

debug crypto ipsec
debug crypto isakmp
debug crypto engine

when done:
no debug all

Please let me know how this turns out.

http://www.NetLeets.com

IT Security news and information
In plain English

 

[desperado618]

Wattie,
Were you able to get this issue resolved?

http://www.NetLeets.com

IT Security news and information
In plain English