FMC displays working IKEv2 tunnel DOWN

[swscco001]

Hello everybody,

our customer is using FMCv 7.2.5.1 and (two) Firepower 1120 (7.0.0.1)
for their S2S tunnels (see screen dump).

We changed a IKEv1 to IKEv2 tunnel (peer-IP 217.6.229.234).

In the VPN > Site To Site overview this working tunnel was displayed as
DOWN (see screen dump).

In the VPN > Site To Site Monitoring the tunnel is correctly displayed
as UP witn active sessions (see screen dump).

In the VPN > Site To Site there is no error message for this tunnel
(see screen dump).

What is the reason for this wrong indication in the Site To Site overview.
The customer feels unsave at such indication because there is a hospital
connected.

This seems to be a general issue becasue other working tunnels were
indicated ar orange.

Thanks a lot for every hint.

Bye
Rene

[Marvin Rhoads]

Yes, the tunnels were up and passing traffic as designed. Just the FMC dashboard GUI was showing otherwise.

[Danny Dulin]

One more question. Is it the deploy in general or deploying a change to the VPN Topology that triggers?

[Marvin Rhoads · Accepted solution]

The deploy had to affect the S2S VPN that is giving issues.

I checked the TAC case notes. We hit one of these bugs, the work-around in the first one fixed the issue:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwf01954

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwd61082

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwf86519

[Danny Dulin]

Thanks Marvin,

TAC came back with 7.2.9 has this bug as well https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwd61082

[Marvin Rhoads]

Yes- that was the second one I had listed. Unfortunately some of these fixed releases only fix the bug if they are fresh installs. Upgrades from earlier versions may sometimes retain the bug behavior (in my experience) or require some "under the covers" manipulation of files to clear the bug completely.

FWIW my customer has not seen a recurrence since we fixed the problem for them early this year. They are now on 7.6

[Danny Dulin]

Thank you. Very Helpful.