Hello everyone,
My company is using ASA 5510 already for a while now (running 8.0(4)); There is VPN monitor on console port, so when I connect, I should be able to track VPN connections. However, there are repeated errors (every few seconds) for few users (each of them using vpnc on linux). The errors are:
%ASA-5-713137: Group = vpnremote, Username = XXX, IP = XXX, Reaper overriding refCnt [0] and tunnelCnt [0] -- deleting SA!
%ASA-3-713232: Group = vpnremote, Username = XXX, IP = XXX, SA lock refCnt = 0, bitmask = 00000080, p1_decrypt_cb = 0, qm_decrypt_cb = 0, qm_hash_cb = 0, qm_spi_ok_cb = 0, qm_dh_cb = 0, qm_secret_key_cb = 0, qm_encrypt_cb = 0
%ASA-7-715065: Group = vpnremote, Username = XXX, IP = XXX, IKE AM Responder FSM error history (struct &0xda81fb60) <state>, <event>: NullState, EV_TM_FAIL-->NullState, NullEvent-->NullState, EV_START_TM-->AM_STANDBY_REKEY, EV_START_TM-->AM_TM_INIT_XAUTH_V6H, EV_RESEND_MSG-->AM_TM_INIT_XAUTH_V6H, NullEvent-->AM_TM_INIT_XAUTH_V6H, EV_ACTIVATE_NEW_SA-->AM_TM_INIT_XAUTH_V6H, NullEvent
%ASA-5-713136: Group = vpnremote, Username = XXX, IP = XXX, IKE session establishment timed out [NullState], aborting!
%ASA-7-713906: fsmDriver returned error
The only thing I have found about this is that it happens when linux user makes unclean disconnect (one user told me he usually disconnect cleanly, but there were times his Internet connection broke; the users don't have problem establishing new connections). I never found how to stop those errors from appearing or perhaps to delete them (if they appear anyway) so that the log can be readable.
I am new in my company, and I am far away from being an expert for ASA, so any help is appreciated.
