pix vpn disconnection / vpn concentrator

[secureIT]

Hi Cisco team,

Could you pls let me know what are the possible reasons of site to site vpn intermetent disconnections between a pix appliance and vpn concentrator. This setup was working before and recently only we are facing such issues. Your inputs are appreciated.

[auraza]

Rajesh:

Depends on the exact issue. If you are seeing the tunnel dropping, you'd have to see why its dropping: DPD failure, one side sending deletes, packets not being received by one device, etc.

If you are just experiencing packet loss, then it could be due to the packet being dropped in transit, or maybe you have high CPU resulting in packets being dropped.

-aun.

PS. please rate this post, if you feel the response was helpful.

[secureIT]

Hi,

Im getting Received encrypted packet with no matching SA, dropping & Removing peer from correlator table failed, no match! logs in the firewall. Does it mean anything mismatch in P-2 proposals ?

moreover, isakmp enable outside is there in the config, does it require a crypto map map_name interface outside command also.?

[auraza]

Can you post the configuration?

[secureIT]

Hi: Pls check the configuration and logs.

For security, i have erased/changed some of the config.

regards

~PR

[secureIT]

Hi: Pls check the attachements..

[secureIT]

Hi auraza - CISCO SYSTEMS,

Can you pls check the config and logs...

[secureIT]

Can someone good security, put some light on this.

[secureIT]

Hi Cisco systems..

Can you please help me on this...

~PR

[secureIT]

HI TEAM; CAN YOU PLEASE HELP ME TO IDENTIFY WHERE THE ISSUE IS ??????

~PR