Uni directional Ipsec Site to site Tunnel Breakage

[Ravi@2670]

Hi All,

I have a site to site vpn established between ASA5525-X firewall & Meraki MX84 security Appliance

Configuration:

ASA end

Phase 1:

Encryption: AES 128, Authentication: pre-shared key, Hash: SHA1, Group:2, Life time:86400

Phase 2:

Encryption:esp-aes, Authentication:esp-sha-hmac , PFS: on(group 2), Lifetime(seconds):86400

Database lifetime is disabled;

Config on meraki also same parameters configured. ACL is mirrored.

Some regular intervals I am facing Unidirectional Ipsec tunnel breakdown from meraki end  but ASA end tunnel is working fine at that time.

Checked with meraki team come to a conclusion that packet had been sent to ASA but did not see the replies from ASA

Could you all please help me out to get out of this problem.

[Francesco Molino]

Hi

If these issues are occurring at regular intervals, can you run done debugs and share the output into a text file.
You can start by debugging ike and ipsec.