vpn trouble

[mw9999]

Hi

I am after advice
I new to working with pixs but have managed setup 5 remote sites all using pix 501 ver 6.3 connecting via a vpn tunnel back to a pix 515 running ver 7

These all work great.

But every so often one of the connections does not connect.

The only way to get it to connected again is to restart the main pix 515.

I am looking for some troubleshooting tips so when it happens again I can try and trace where the fault is occurring has anyone got any ideas or can point my in the right direction.

Thanks in advance

 

[xylax]

What type of VPN are you using? Are you doing point to point with ISAKMP key, Dynamic Point to point or EZVPN? I had similar issues with 501s connecting to a 515. I found that the problem was the Dynamic Point-2-point was not establishing the VPN's to the correct remote IP address. Not sure why. When I talked to a cisco engineer (TAC call), he said that Dynamic Point2Point without ISAKMP keys only works for about 30 locations. We have 240 locations. I switched them all to EZVPN. They work like a charm and I can manage them much easier.

Shon
Network Administrator