Hello,
We've just deployed a site-to-site VPN using a 5505 ASA on the client's site and a checkpoint Nokia FW on our site. Everything seems to be fine except that the user's connections to their file shares seem to be intermittently dropping. One minute the connection to the shares is there, next thing it's lost.
There is no logic to it because no two users are experiencing issues at the same time, as a matter of fact even on the same PC where a user has access to 3 shares on 3 different servers, one could be showing as connected whereas the other two be dropping.
Any idea where I can look to trouble-shoot such an issue?
I noticed the following on the uplink interface to the outside router:
Interface Ethernet0/0 "", is up, line protocol is up
Hardware is 88E6095, BW 100 Mbps, DLY 100 usec
Auto-Duplex(Half-duplex), Auto-Speed(100 Mbps)
Input flow control is unsupported, output flow control is unsupported
Available but not configured via nameif
MAC address 30e4.db30.15ed, MTU not set
IP address unassigned
15767971 packets input, 14500966317 bytes, 0 no buffer
Received 7 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
133183 switch ingress policy drops
12874519 packets output, 3083603673 bytes, 0 underruns
0 pause output, 0 resume output
64568 output errors, 56659 collisions, 0 interface resets
0 late collisions, 35746 deferred
0 rate limit drops
0 switch egress policy drops
0 input reset drops, 0 output reset drops
As you can see the Duplex and Speed are set to auto, I've rectified this since then and I'm keeping a close eye on the output errors, and collisions. However, I'm afraid that this did not rectify the issue and the users are still experiencing intermittent connection dropping to their file shares over the VPN!
