cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
368
Views
0
Helpful
1
Replies

Issue with ASA to ASA Tunnel dropping during rekey, PIX to ASA works fine

nyciscotech
Level 1
Level 1

Hi All,

Working with TAC regarding this ongoing issue but wanted to see if any of you out there have experienced this issue.

ASA running 8.0.3 with the same exact model and software ASA 8.0.3 connected over a VPN tunnel. The remote ASA is connecting via dynamic IP. According to the debug logs, the tunnel is dropped for approx 1 minute during the rekey and comes back online without any issue.

The strange issue is PIX's running 6.3 are connected using the same VPN (also dynamic) configuration and have no issues at all with the tunnel dropping.

We have checked the following:

- Encryption/VPN settings and lifetime identical at all sites

- ACL configured correctly

- Lifetime set by time, not traffic

- Reloaded all sites to bring the VPN links up.

Any other suggestions I might want to look at or check?

Thanks

1 Reply 1

phillipediab
Level 1
Level 1

do you have pfs enabled ?

Review Cisco Networking for a $25 gift card