topic Re: Upgrading from ASA 7.2 -> 8.0. L2L IPSEC Issues... in Network Security

Upgrading from ASA 7.2 -> 8.0. L2L IPSEC Issues...

pavlosd — Fri, 21 Feb 2020 09:54:31 GMT

Hi All,

We just recently upgrading one ASA firewall to version 8, for evaluation purposes. Upgrade was straight forward with no errors. Most of the existing rules are working fine. We do noticed a problem with most of our L2L IPsecs. We cannot get them working, configuration is there and migrated OK. they are kept stack in MM_WAIT_DELETE and log shows....

%ASA-3-713902: Group = 10.50.133.175, IP = 10.50.133.175, QM FSM error (P2 struct &0xc9080ba0, mess id 0x513c9acd)!

%ASA-3-713902: Group = 10.50.133.175, IP = 10.50.133.175, Removing peer from correlator table failed, no match!

We did try to delete a few and recreate them, but no luck....

Any ideas????

Re: Upgrading from ASA 7.2 -> 8.0. L2L IPSEC Issues...

pavlosd — Tue, 26 Feb 2008 14:49:45 GMT

Hi All,

Just to let you know that, we managed to solve our problem by upgrading to interim release 8.0(3)-6.

Regards.

Re: Upgrading from ASA 7.2 -> 8.0. L2L IPSEC Issues...

ssteichmann — Thu, 28 Feb 2008 18:28:28 GMT

As an FYI, we had a similar issue yesterday after going to 7.2(2). There are previous posts that mention this, but the solution for us was here:

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807e0aca.shtml#Solution8