I get this message often in my debugs

[pamirian76]

hi,

I'm having a disconnection problems with one of my clients and in my debugs he is the only one that gives me alot of

x.x.x.x is HIS FW

y.y.y.y is MY FW

crypto_isakmp_process_block:src:x.x.x.x, dest:y.y.y.y spt:500 dpt:500

ISAMKP (0): received DPD_R_U_THERE from peer x.x.x.x

any ideas ?

thank you.

[Richard Burts]

The first message indicates ISAKMP processing. There was an ISAKMP packet with source address of his FW and destination address of your FW. The source port and destination port were both 500 (UDP 500 is the port used by ISAKMP).

The second message indicates that you received a Dead Peer Detect message (DPD) which is a method for determining whether the remote peer is still working and responsive. If DPD does not get an appropriate response from its remote then it will tear down the Security Associations.

I do not know if this gets you closer to the reason why you are getting disconnects from your peer. But this is what these messages mean.

HTH

Rick