received ipsec delete request

[thopee133]

thread463-1321723

Hi All - I am trying to direct this post to simpsons245. He started a thread over a year ago describing an issue which is very similar to mine. I have a VPN connection between my office (Sonicwall NSA 220) and Sprint. Sprint has a Juniper Netscreen. Every time my tunnel phase 2 negotiation renews (8 hours), after the connection negotiates successfully, the sprint (juniper) sends a "Received IPSec SA delete request". Although, my connection comes back up online and doesn't indicate that the tunnel actually went down, I'm not sure if this is normal activity. I tried talking to Sonicwall, but every agent I spoke with gives me a different answer. I'm really hoping that you guys can help.

Thanks.

 

[HungryHouse]

Hey Thopee,

Often times, the "IKE SA delete request" comes as a result of different lifetimes.
Please check the lifetimes on both sides for Phase1 and Phase2 and ensure they are the same.

Your fortunate that your tunnel is staying up, however, that may be due to the mode of the device (main/aggressive/responder)

If you have that as a baseline, you can then begin troubleshooting if the issue persists.

Hope this helps....

HH

Real trouble call:
Customer: "I have a huge problem. A friend has put a screensaver on my computer, but every time I move the mouse, it disappears!"

 

[thopee133]

HH -

The lifetimes are the same on both sides for phase 1 and 2. Keep alive and dead peer detection are also turned off. I also tried different combinations of both keep alive and dead peer detection as well but the problem persists...

Thanks