Site-to-Site VPN Tunnel fails after upgrade 8.3(2) to 8.4(4)

[Michael Reyes]

Hello Team Cisco,

I upgraded an ASA 5505 from 8.3(2) to 8.4(4) this evening.  The 5505 is a backup and used to perform testing prior to production changes. After the upgrade was complete, a VPN tunnel began to fail.  I did a limited search online to see if this was a known issue or something new.  I also reviewed the release notes but did not see anything that matched the issue I received.

My concern is that this tunnel configuration is scheduled to be deployed to the production firewalls next week after their upgrade.  But if it failed on the upgraded test unit, it may fail on the production units.

I downgraded the backup unit to 8.3(1) and verified that the tunnel indeed worked at that level.

Any input or thoughts would be greatly appreciated.

Thanks,

Michael

[cflory]

Did you happen to capture any logs or debugs during the failure?  That's the first place I'd look.  At least that gives you something for TAC, as well, if in fact this is a deeper issue.

-Chris

[Michael Reyes]

Hi Chris,

Thanks for the response. Unfortunately not.  I'll need to upgrade and capture logs and upload for review.  I may not get to that until this afternoon or Monday of next week.

Regards,

Michael