VPN Works great, just doesn't work and no logs

[peanican]

Ok,

We've had 4 vpn connections on our pix for about 5 years. They've worked flawlessly but now I have a weird one. We can still connect to the vpns fine; we get the proper addresses but are unable to traverse the network. Normally this would not be an issue because we would troubleshoot it and solve it. But my problem is I can't get anything related to the vpn traffic to show up in the logs. I don't see anything about traffic being blocked. Any ideas of what could cause this or how I could see what it is doing. my logging level is debug (all other traffic is being logged)

 

[unclerico]

can you detail your network topology?? what device is your gateway??

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[peanican]

VPN client --->Pix 515e---->Cisco3750 L3----->Network

The gateway is the Pix515e, which in turn pushes all the traffic to the 3750 which acts as my router.

Just to make sure I'm not crazy, I've never had to troubleshoot a working VPN, I've done vpn crypto issues. So let me just confirm this. Should I or should I not be able to see connections established on the pix from my vpn client? to me it looks like the after the

I've scheduled a reboot of the appliance tonight. Just seems weird for it to stop all of a sudden.

 

[unclerico]

yes, if you issue sh conn | in <vpn_ip_address> it should bring back a list of existing connections. First thing I would do is just double check that your 3750 has the correct routes in it. If it does, then definitely reboot the device. I've seen a reboot clear up many an issue in the past. Be sure to post back if any of the above fixes it.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)