6500 FWSM Connection problem with IPsec

[safe]

Dear All,

I am facing very strange problem.We are giving networking servies to customers.We have cisco 6509 switch which having FWSM module where we have create different Vlans for different customers.We have define access list for each vpn to permit ip any any .SO we dont block any of customer traffic.Then also many time when i check FWSM logs in VMS i see that many IPsec connections are failed ,these logs are coming on daily basis.Is any one facing same problem.One more problem i am facing that is when remote brach is not connected then also i can able to see that connection is establised between Head Office Loopback IP and Branch Loopback IP.

TIA

SAM

[beth-martin]

There could be a possiblity of slow memory leak that is occuring over a period time and when you reach a stage at very low free memory, you start seeing the FWSM error messages

[safe]

Dear Martin ,

Thanks for ur reply but this is not memory or CPU issue as i hv check this is under control.

Please find my network setup

1) Create sepearate Vlan for all customer.

2) Apply access list permit ip any any to all interfaces

3) I can see Ipsec connection between HO Loopback IP & remote IP on UDP port 500.

Problems I am facing is that : -

1) When any of remote site is going down but Ipsec connection still there in my FWSM

2) I have already told that i have defined ACL which permit all ip traffic then also many time Ipsec tunnel is not establised ,find logs below

--------------------------------------------

No translation group found for protocol 50 src TEST:10.199.199.13 dst CISCO:10.199.199.1

No translation group found for protocol 50 src TEST :192.168.20.193 dst TISCO:192.168.10.5

No translation group found for protocol 47 src TEST :10.10.8.10 dst HERO:10.10.7.20

---------------------------------------------

IS anyone facing such problem pls share your ideas

TIA

Regards

SAM