hello there,  RA is a vpn, a client disconnects and reconnects randomly  in debug I found the following messages:    Aug 29 09:56:04 [IKEv1]IP = 10.99.1.246, IKE_DECODE SENDING Message (msgid=84b6536a) with payloads : HDR + HASH (8) + NOTIFY (11) + NONE (0) total length : 84 Aug 29 09:58:45 [IKEv1]IP = 10.99.1.246, IKE_DECODE RECEIVED Message (msgid=4d0ca911) with payloads : HDR + HASH (8) + NOTIFY (11) + NONE (0) total length : 84 Aug 29 09:58:45 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, processing hash payload Aug 29 09:58:45 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, processing notify payload Aug 29 09:58:45 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, Received keep-alive of type DPD R-U-THERE (seq number 0x828eba68) Aug 29 09:58:45 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, Sending keep-alive of type DPD R-U-THERE-ACK (seq number 0x828eba68) Aug 29 09:58:45 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, constructing blank hash payload Aug 29 09:58:45 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, constructing qm hash payload Aug 29 09:58:45 [IKEv1]IP = 10.99.1.246, IKE_DECODE SENDING Message (msgid=fe8c0b74) with payloads : HDR + HASH (8) + NOTIFY (11) + NONE (0) total length : 84 Aug 29 10:02:55 [IKEv1]IP = 10.99.1.246, IKE_DECODE RECEIVED Message (msgid=d99c2e99) with payloads : HDR + HASH (8) + NOTIFY (11) + NONE (0) total length : 84 Aug 29 10:02:55 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, processing hash payload Aug 29 10:02:55 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, processing notify payload Aug 29 10:02:55 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, Received keep-alive of type DPD R-U-THERE (seq number 0x828eba69) Aug 29 10:02:55 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, Sending keep-alive of type DPD R-U-THERE-ACK (seq number 0x828eba69) Aug 29 10:02:55 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, constructing blank hash payload Aug 29 10:02:55 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, constructing qm hash payload Aug 29 10:02:55 [IKEv1]IP = 10.99.1.246, IKE_DECODE SENDING Message (msgid=abbdb60) with payloads : HDR + HASH (8) + NOTIFY (11) + NONE (0) total length : 84 Aug 29 10:03:54 [IKEv1]IP = 10.99.1.246, IKE_DECODE RECEIVED Message (msgid=85243317) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 72 Aug 29 10:03:54 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, processing hash payload Aug 29 10:03:54 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, processing delete Aug 29 10:03:54 [IKEv1]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, Connection terminated for peer oncfsafi.  Reason: Peer Terminate  Remote Proxy 10.254.25.3, Local Proxy 0.0.0.0 Aug 29 10:03:54 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, Active unit receives a delete event for remote peer 10.99.1.246. Aug 29 10:03:54 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, IKE Deleting SA: Remote Proxy 10.254.25.3, Local Proxy 0.0.0.0 Aug 29 10:03:54 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, IKE SA AM:ca9363fd rcv'd Terminate: state AM_ACTIVE  flags 0x0800f041, refcnt 1, tuncnt 0 Aug 29 10:03:54 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, IKE SA AM:ca9363fd terminating:  flags 0x0900f001, refcnt 0, tuncnt 0 Aug 29 10:03:54 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, sending delete/delete with reason message Aug 29 10:03:54 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, constructing blank hash payload Aug 29 10:03:54 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, constructing IKE delete payload Aug 29 10:03:54 [IKEv1 DEBUG]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, constructing qm hash payload Aug 29 10:03:54 [IKEv1]IP = 10.99.1.246, IKE_DECODE SENDING Message (msgid=e9d1b661) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 80 Aug 29 10:03:54 [IKEv1]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, Session is being torn down. Reason: User Requested Aug 29 10:03:54 [IKEv1]Group = grpgabexternes, Username = oncfsafi, IP = 10.99.1.246, Deleting static route for client address: 10.254.25.3  Aug 29 10:03:54 [IKEv1]IP = 10.99.1.246, Received encrypted packet with no matching SA, dropping Aug 29 10:07:19 [IKEv1]IP = 10.99.1.246, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + KE (4) + NONCE (10) + ID (5) + VENDOR (13) + VENDOR (13)  Can someone explain to me the cause of the disconnection.   ... View more

hi, we have a customer that have a vpn remote access configured on asa 5525 , when vpn users connect they take an address  on the same subnet as the server they need to connect to.(172.17.2.0/24) i want to filter the communication between the vpn users and the servers ; i want to restrict vpn users to access only to some servers how can i make this . does vpn-filter access-list can block traffic between 2 address on same subnet .     ... View more

hi , i want to import users to ACS 4.2 with the static ip address  assigned to every user. i have found the format of the file  to add users but  i did not find how can i add the static ip to this file. ADD:Dchira:CSDB:backup:PROFILE:4 ... View more

hi , i have  configured my ACS 4.2 to  assigne static ip addres to vpn users (172.17.17.100) ,the acs assigne the ip address but it  gives the users the default subnet mask (255.255.0.0) . i want to change the mask to be 255.255.255.0 . it's possible ? on the user atribute there is no option called subnet mask. thanks ... View more

hi , we have a servers connected y vpn connection and have the integrated firewall enabled . i want o change the version of the operating system to Win 7 but the integrated firewall is not supported on  win 7 . and with the old version i'm able to block inbound connexion to this server .how can i do this with the new version if the firewall is not enabled.   thanks,   ... View more

hi , i  have found that users can decryp group password from  the PCF file of the vpn client . i want to know with wich protocole the client VPN crypt this passord and how can i  solve this issue . best regards Yassine ... View more

  hi , i want to configure  ipsec rempote access vpn with vpn client  ,but i wat to use certificate instead of preshared key and authenticate users with radius server . how can i do this . thanks ... View more

Hi , we have a asa that block some ip dresse with this reason ( Drop-reason:(no-adjacency ) No valid  adjacency ) and  when i check the log i found this message for the same blocked ip adresse  when they try to make dmvpn tunnel wyh the hub . Routing failed to locate next hop for UDP from MPLS:10.0.104.53/500 to MPLS:10.5.250.251/500 i inform you that the ip adresse of the hub (10.5.250.251 ) is connected in DMVPN Interface not MPLS ,and tha ASA is configured with na nat-cotrol command .nat is not configured. can someone help s to solve this issue ; best regards Yassine ... View more