L2L VPN is terminating every Phase 2 rekey

[bleuangel]

Hello,

Need your help on the L2L VPN issue that we are facing. Our Phase 2 lifetime is set 3600, every 50 mins when the rekey happens, the VPN tunnel terminates & will be up again after 10 mins. So it happens every hour. The other end of the tunnel is a checkpoint FW. Our ASA 5510 version is 8.4(7).

I have attached the debug that we have captured during the rekey time.

Appreciate your response soon.

Thanks!

Vhel

[rvarelac]

Hi Bleuangel ,

There are some  issues between ASA and checkpoints L2L devices.

You might be hitting this bug .

https://tools.cisco.com/bugsearch/bug/CSCtb98095

Please follow the workarounds mentioned o the bug and check how it goes.

Hope this helps.

Do not forget to rate helpful post

-Randy -