VPN Tunnel stopped working all of a sudden 1

[9rrrwttsrf]

I have been using dynamic VPN tunneling for about a year without any problems. Now, all of sudden the tunnel will not come up any more. No chnages have been made. Any idea what may have caused this???

 

[NetworkGhost]

what are you tunneling to ? Point to Point or Client to Server (Pix)? Any ISP changes? Post your config

 

[9rrrwttsrf]

I am running site-to-site with a PIX 505 to a 515. No ISP changes, at least none that I am aware of. Could the ISP have done something I am not aware of have caused this? BTW, I don't think dynamic is necessary anymore.

 

[daidem77]

Post both configurations if possible. Also try the following comnmads to see details of the site to site connection

show crypto isakmp sa
show crypto ipsec sa
show crypto engine connection active

Also you can try to debug the connection

debug crypto isakmp
debug crypto ipsec

 

[9rrrwttsrf]

I've done all that. Unfortunately my debug log isn't saying anything since the interesting traffic has to be sourced from the other site which is still unoccupied office space, and unfortunately until I get over there to setup ssh I can't initiate any traffic. I do know that a sh crypto isakmp sa isn't revealing any connections, and cypto ipsec is also void of any peers.

wtpix# sh crypto isakmp sa
Total : 0
Embryonic : 0
dst src state pending created
wtpix#


wtpix# sh crypto ipsec sa

interface: outside
Crypto map tag: mapset, local addr. 208.57.46.232

 

[daidem77]

Can you ping the remote site IP? Is it the same as what was configured with the crypto map set peer command?

If this is a unoccupied office... could be there has not been any interesting traffic after the sa lifetime expired. You can't be sure of anything till you get your hands on the remote pix.