cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
528
Views
0
Helpful
1
Replies

ASA tunnel drop frequently

andyyap
Beginner
Beginner

I am encountering this issue where the IPsec tunnel drop frequently and unable to recover for at least 4-8 hours. At my end I am constantly seeing message as follow:                  

Nov 10 2012 08:11:27: %ASA-4-713903: Group = X.X.X.X, IP = X.X.X.X, Received encrypted packet when crypto not active!!

Nov 10 2012 08:12:02: %ASA-4-713903: Group = X.X.X.X, IP = X.X.X.X, Received encrypted packet when crypto not active!!

Nov 10 2012 08:12:34: %ASA-4-713903: Group = X.X.X.X, IP = X.X.X.X, Received encrypted packet when crypto not active!!

Nov 10 2012 08:13:38: %ASA-4-713903: Group = X.X.X.X, IP = X.X.X.X, Received encrypted packet when crypto not active!!

Nov 10 2012 08:14:38: %ASA-4-713903: Group = X.X.X.X, IP = X.X.X.X, Received encrypted packet when crypto not active!!

Nov 10 2012 08:16:49: %ASA-4-713903: Group = X.X.X.X, IP = X.X.X.X, Received encrypted packet when crypto not active!!

Nov 10 2012 08:17:49: %ASA-4-713903: Group = X.X.X.X, IP = X.X.X.X, Received encrypted packet when crypto not active!!

Nov 10 2012 08:17:49: %ASA-4-713903: Group = X.X.X.X, IP = X.X.X.X, Received encrypted packet when crypto not active!!

Nov 10 2012 08:18:24: %ASA-4-713903: Group = X.X.X.X, IP = X.X.X.X, Received encrypted packet when crypto not active!!

Nov 10 2012 08:18:24: %ASA-4-713903: Group = X.X.X.X, IP = X.X.X.X, Information Exchange processing failed

Anyone can shed some light of what could went wrong?

Thank you.

Regards

Andy

1 Reply 1

pkupisie
Cisco Employee
Cisco Employee

Few things that it would be nice to have attached:

1) Crypto part of the configuration (show runn crypto)

2) show crypto isakmp sa

3) show crypto ipsec sa

4) What is the exact version of the box?

If possible please use attachements instead pasting into the posts.

If your problem is urgent please create a TAC case, so you will have imidiate somebody to assist you.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: